Lucene search

CiscoCVE-2015-0640

HistoryMar 26, 2015 - 10:59 a.m.

CVE-2015-0640

2015-03-2610:59:06

CWE-20

cisco

web.nvd.nist.gov

cve-2015-0640

cisco

ios xe

hsl

denial of service

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

56.0%

JSON

The high-speed logging (HSL) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via large IP packets that require NAT and HSL processing after fragmentation, aka Bug ID CSCuo25741.

Affected configurations

Nvd

Node

ciscoios_xeMatch3.1s.0

ciscoios_xeMatch3.1s.1

ciscoios_xeMatch3.1s.2

ciscoios_xeMatch3.1s.3

ciscoios_xeMatch3.1s.4

ciscoios_xeMatch3.1s.5

ciscoios_xeMatch3.1s.6

ciscoios_xeMatch3.2s.0

ciscoios_xeMatch3.2s.1

ciscoios_xeMatch3.2s.2

ciscoios_xeMatch3.2s.3

ciscoios_xeMatch3.3s.0

ciscoios_xeMatch3.3s.1

ciscoios_xeMatch3.3s.2

ciscoios_xeMatch3.5s

ciscoios_xeMatch3.5s.0

ciscoios_xeMatch3.5s.1

ciscoios_xeMatch3.5s.2

ciscoios_xeMatch3.6s

ciscoios_xeMatch3.6s.0

ciscoios_xeMatch3.6s.1

ciscoios_xeMatch3.6s.2

ciscoios_xeMatch3.7s

ciscoios_xeMatch3.7s.0

ciscoios_xeMatch3.7s.1

ciscoios_xeMatch3.7s.2

ciscoios_xeMatch3.7s.3

ciscoios_xeMatch3.7s.4

ciscoios_xeMatch3.7s.5

ciscoios_xeMatch3.7s.6

ciscoios_xeMatch3.7s.7

ciscoios_xeMatch3.8s

ciscoios_xeMatch3.8s.0

ciscoios_xeMatch3.8s.1

ciscoios_xeMatch3.8s.2

ciscoios_xeMatch3.9s.0

ciscoios_xeMatch3.9s.1

ciscoios_xeMatch3.9s.2

ciscoios_xeMatch3.10s.0

ciscoios_xeMatch3.10s.0a

ciscoios_xeMatch3.10s.1

ciscoios_xeMatch3.10s.2

ciscoios_xeMatch3.10s.3

ciscoios_xeMatch3.11s.0

ciscoios_xeMatch3.11s.1

ciscoios_xeMatch3.11s.2

ciscoios_xeMatch3.12s.0

ciscoios_xeMatch3.12s.1

VendorProductVersionCPE
ciscoios_xe3.1s.0cpe:2.3:o:cisco:ios_xe:3.1s.0:*:*:*:*:*:*:*
ciscoios_xe3.1s.1cpe:2.3:o:cisco:ios_xe:3.1s.1:*:*:*:*:*:*:*
ciscoios_xe3.1s.2cpe:2.3:o:cisco:ios_xe:3.1s.2:*:*:*:*:*:*:*
ciscoios_xe3.1s.3cpe:2.3:o:cisco:ios_xe:3.1s.3:*:*:*:*:*:*:*
ciscoios_xe3.1s.4cpe:2.3:o:cisco:ios_xe:3.1s.4:*:*:*:*:*:*:*
ciscoios_xe3.1s.5cpe:2.3:o:cisco:ios_xe:3.1s.5:*:*:*:*:*:*:*
ciscoios_xe3.1s.6cpe:2.3:o:cisco:ios_xe:3.1s.6:*:*:*:*:*:*:*
ciscoios_xe3.2s.0cpe:2.3:o:cisco:ios_xe:3.2s.0:*:*:*:*:*:*:*
ciscoios_xe3.2s.1cpe:2.3:o:cisco:ios_xe:3.2s.1:*:*:*:*:*:*:*
ciscoios_xe3.2s.2cpe:2.3:o:cisco:ios_xe:3.2s.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	3.1s.0	cpe:2.3:o:cisco:ios_xe:3.1s.0:::::::*
cisco	ios_xe	3.1s.1	cpe:2.3:o:cisco:ios_xe:3.1s.1:::::::*
cisco	ios_xe	3.1s.2	cpe:2.3:o:cisco:ios_xe:3.1s.2:::::::*
cisco	ios_xe	3.1s.3	cpe:2.3:o:cisco:ios_xe:3.1s.3:::::::*
cisco	ios_xe	3.1s.4	cpe:2.3:o:cisco:ios_xe:3.1s.4:::::::*
cisco	ios_xe	3.1s.5	cpe:2.3:o:cisco:ios_xe:3.1s.5:::::::*
cisco	ios_xe	3.1s.6	cpe:2.3:o:cisco:ios_xe:3.1s.6:::::::*
cisco	ios_xe	3.2s.0	cpe:2.3:o:cisco:ios_xe:3.2s.0:::::::*
cisco	ios_xe	3.2s.1	cpe:2.3:o:cisco:ios_xe:3.2s.1:::::::*
cisco	ios_xe	3.2s.2	cpe:2.3:o:cisco:ios_xe:3.2s.2:::::::*