Lucene search

CiscoCVE-2015-0646

HistoryMar 26, 2015 - 10:59 a.m.

CVE-2015-0646

2015-03-2610:59:11

CWE-399

cisco

web.nvd.nist.gov

cisco

ios

ios xe

memory leak

tcp

remote attackers

denial of service

cve-2015-0646

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

Low

EPSS

0.006

Percentile

77.8%

JSON

Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted TCP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum94811.

Affected configurations

Nvd

Node

ciscoios_xeMatch3.3xo.0

ciscoios_xeMatch3.3xo.1

ciscoios_xeMatch3.3xo.2

ciscoios_xeMatch3.5e.0

ciscoios_xeMatch3.5e.1

ciscoios_xeMatch3.5e.2

ciscoios_xeMatch3.5e.3

ciscoios_xeMatch3.6e.0

ciscoios_xeMatch3.6e.1

ciscoios_xeMatch3.8s.0

ciscoios_xeMatch3.8s.1

ciscoios_xeMatch3.8s.2

ciscoios_xeMatch3.8s_base

ciscoios_xeMatch3.9s.0

ciscoios_xeMatch3.9s.1

ciscoios_xeMatch3.9s.2

ciscoios_xeMatch3.10s.0

ciscoios_xeMatch3.10s.0a

ciscoios_xeMatch3.10s.1

ciscoios_xeMatch3.10s.2

ciscoios_xeMatch3.10s.3

ciscoios_xeMatch3.10s.4

ciscoios_xeMatch3.11s.0

ciscoios_xeMatch3.11s.1

ciscoios_xeMatch3.11s.2

ciscoios_xeMatch3.11s.3

ciscoios_xeMatch3.11s.4

ciscoios_xeMatch3.12s.0

ciscoios_xeMatch3.12s.1

Node

ciscoiosMatch12.2

ciscoiosMatch12.4

ciscoiosMatch15.0

ciscoiosMatch15.1

ciscoiosMatch15.2

ciscoiosMatch15.3

ciscoiosMatch15.4

VendorProductVersionCPE
ciscoios_xe3.3xo.0cpe:2.3:o:cisco:ios_xe:3.3xo.0:*:*:*:*:*:*:*
ciscoios_xe3.3xo.1cpe:2.3:o:cisco:ios_xe:3.3xo.1:*:*:*:*:*:*:*
ciscoios_xe3.3xo.2cpe:2.3:o:cisco:ios_xe:3.3xo.2:*:*:*:*:*:*:*
ciscoios_xe3.5e.0cpe:2.3:o:cisco:ios_xe:3.5e.0:*:*:*:*:*:*:*
ciscoios_xe3.5e.1cpe:2.3:o:cisco:ios_xe:3.5e.1:*:*:*:*:*:*:*
ciscoios_xe3.5e.2cpe:2.3:o:cisco:ios_xe:3.5e.2:*:*:*:*:*:*:*
ciscoios_xe3.5e.3cpe:2.3:o:cisco:ios_xe:3.5e.3:*:*:*:*:*:*:*
ciscoios_xe3.6e.0cpe:2.3:o:cisco:ios_xe:3.6e.0:*:*:*:*:*:*:*
ciscoios_xe3.6e.1cpe:2.3:o:cisco:ios_xe:3.6e.1:*:*:*:*:*:*:*
ciscoios_xe3.8s.0cpe:2.3:o:cisco:ios_xe:3.8s.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	3.3xo.0	cpe:2.3:o:cisco:ios_xe:3.3xo.0:::::::*
cisco	ios_xe	3.3xo.1	cpe:2.3:o:cisco:ios_xe:3.3xo.1:::::::*
cisco	ios_xe	3.3xo.2	cpe:2.3:o:cisco:ios_xe:3.3xo.2:::::::*
cisco	ios_xe	3.5e.0	cpe:2.3:o:cisco:ios_xe:3.5e.0:::::::*
cisco	ios_xe	3.5e.1	cpe:2.3:o:cisco:ios_xe:3.5e.1:::::::*
cisco	ios_xe	3.5e.2	cpe:2.3:o:cisco:ios_xe:3.5e.2:::::::*
cisco	ios_xe	3.5e.3	cpe:2.3:o:cisco:ios_xe:3.5e.3:::::::*
cisco	ios_xe	3.6e.0	cpe:2.3:o:cisco:ios_xe:3.6e.0:::::::*
cisco	ios_xe	3.6e.1	cpe:2.3:o:cisco:ios_xe:3.6e.1:::::::*
cisco	ios_xe	3.8s.0	cpe:2.3:o:cisco:ios_xe:3.8s.0:::::::*