Lucene search

[email protected]NVD:CVE-2015-0646

HistoryMar 26, 2015 - 10:59 a.m.

CVE-2015-0646

2015-03-2610:59:11

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

9.1

Confidence

High

EPSS

0.006

Percentile

77.8%

JSON

Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted TCP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCum94811.

Affected configurations

Nvd

Node

ciscoios_xeMatch3.3xo.0

ciscoios_xeMatch3.3xo.1

ciscoios_xeMatch3.3xo.2

ciscoios_xeMatch3.5e.0

ciscoios_xeMatch3.5e.1

ciscoios_xeMatch3.5e.2

ciscoios_xeMatch3.5e.3

ciscoios_xeMatch3.6e.0

ciscoios_xeMatch3.6e.1

ciscoios_xeMatch3.8s.0

ciscoios_xeMatch3.8s.1

ciscoios_xeMatch3.8s.2

ciscoios_xeMatch3.8s_base

ciscoios_xeMatch3.9s.0

ciscoios_xeMatch3.9s.1

ciscoios_xeMatch3.9s.2

ciscoios_xeMatch3.10s.0

ciscoios_xeMatch3.10s.0a

ciscoios_xeMatch3.10s.1

ciscoios_xeMatch3.10s.2

ciscoios_xeMatch3.10s.3

ciscoios_xeMatch3.10s.4

ciscoios_xeMatch3.11s.0

ciscoios_xeMatch3.11s.1

ciscoios_xeMatch3.11s.2

ciscoios_xeMatch3.11s.3

ciscoios_xeMatch3.11s.4

ciscoios_xeMatch3.12s.0

ciscoios_xeMatch3.12s.1

Node

ciscoiosMatch12.2

ciscoiosMatch12.4

ciscoiosMatch15.0

ciscoiosMatch15.1

ciscoiosMatch15.2

ciscoiosMatch15.3

ciscoiosMatch15.4

VendorProductVersionCPE
ciscoios_xe3.3xo.0cpe:2.3:o:cisco:ios_xe:3.3xo.0:*:*:*:*:*:*:*
ciscoios_xe3.3xo.1cpe:2.3:o:cisco:ios_xe:3.3xo.1:*:*:*:*:*:*:*
ciscoios_xe3.3xo.2cpe:2.3:o:cisco:ios_xe:3.3xo.2:*:*:*:*:*:*:*
ciscoios_xe3.5e.0cpe:2.3:o:cisco:ios_xe:3.5e.0:*:*:*:*:*:*:*
ciscoios_xe3.5e.1cpe:2.3:o:cisco:ios_xe:3.5e.1:*:*:*:*:*:*:*
ciscoios_xe3.5e.2cpe:2.3:o:cisco:ios_xe:3.5e.2:*:*:*:*:*:*:*
ciscoios_xe3.5e.3cpe:2.3:o:cisco:ios_xe:3.5e.3:*:*:*:*:*:*:*
ciscoios_xe3.6e.0cpe:2.3:o:cisco:ios_xe:3.6e.0:*:*:*:*:*:*:*
ciscoios_xe3.6e.1cpe:2.3:o:cisco:ios_xe:3.6e.1:*:*:*:*:*:*:*
ciscoios_xe3.8s.0cpe:2.3:o:cisco:ios_xe:3.8s.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	3.3xo.0	cpe:2.3:o:cisco:ios_xe:3.3xo.0:::::::*
cisco	ios_xe	3.3xo.1	cpe:2.3:o:cisco:ios_xe:3.3xo.1:::::::*
cisco	ios_xe	3.3xo.2	cpe:2.3:o:cisco:ios_xe:3.3xo.2:::::::*
cisco	ios_xe	3.5e.0	cpe:2.3:o:cisco:ios_xe:3.5e.0:::::::*
cisco	ios_xe	3.5e.1	cpe:2.3:o:cisco:ios_xe:3.5e.1:::::::*
cisco	ios_xe	3.5e.2	cpe:2.3:o:cisco:ios_xe:3.5e.2:::::::*
cisco	ios_xe	3.5e.3	cpe:2.3:o:cisco:ios_xe:3.5e.3:::::::*
cisco	ios_xe	3.6e.0	cpe:2.3:o:cisco:ios_xe:3.6e.0:::::::*
cisco	ios_xe	3.6e.1	cpe:2.3:o:cisco:ios_xe:3.6e.1:::::::*
cisco	ios_xe	3.8s.0	cpe:2.3:o:cisco:ios_xe:3.8s.0:::::::*