CVE-2015-6432

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service (device reload) via a crafted update, aka Bug ID CSCuw83486.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:cisco:ios_xr:4.2.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:5.0.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:5.1.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:5.2.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:5.2.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:5.2.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:5.3.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:5.3.2:*:*:*:*:*:*:*

History

21 Nov 2024, 02:34

Type Values Removed Values Added
References () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160104-iosxr - Vendor Advisory () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160104-iosxr - Vendor Advisory
References () http://www.securitytracker.com/id/1034570 - () http://www.securitytracker.com/id/1034570 -

Information

Published : 2016-01-05 02:59

Updated : 2024-11-21 02:34


NVD link : CVE-2015-6432

Mitre link : CVE-2015-6432

CVE.ORG link : CVE-2015-6432


JSON object : View

Products Affected

cisco

  • ios_xr
CWE
CWE-399

Resource Management Errors