CVE-2015-6273

Cisco IOS XE on ASR 1000 devices (pre-3.1.2S) is affected by a vulnerability in the automatic setup of Virtual Fragment Reassembly (VFR) handled by certain firewall and NAT components. The root cause is mishandling of VFR setup, which can be triggered by crafted IP packets, allowing a remote atta...