CVE-2015-0695

High

Published: 17/04/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Cisco IOS XR versions 4.3.4 through 5.3.0 on ASR 9000 devices have an issue with handling bridge-group virtual interface (BVI) traffic when uRPF, PBR, QoS, or an ACL is configured. This can allow remote attackers to cause a denial of service by triggering chip and card hangs and reloads.

Risk Assessment

Attackers can exploit this vulnerability to cause denial of service, potentially leading to downtime of network devices and affecting service availability within the organization.

Recommendation

It is recommended to update the system to the latest version that includes fixes for this vulnerability and to review the configuration of uRPF, PBR, QoS, and ACL to minimize risk.

Other vulnerabilities in Cisco IOS XR na urządzeniach ASR 9000

CVE-2016-6355High
A memory leak in Cisco IOS XR versions 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets.

Original NVD description (English source)

Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface (BVI) traffic, which allows remote attackers to cause a denial of service (chip and card hangs and reloads) by triggering use of a BVI interface for IPv4 packets, aka Bug ID CSCur62957.