CVE-2015-4199

High

Published: 27/06/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A race condition in the Performance Routing Engine (PRE) module in Cisco IOS 15.3S allows remote attackers to cause a denial of service by triggering module crashes.

Risk Assessment

Attackers can exploit this vulnerability to disrupt the operation of UBR devices, leading to service availability issues.

Recommendation

It is recommended to update Cisco IOS to the latest version to mitigate this vulnerability and to monitor network traffic for potential attacks.

Other vulnerabilities in Cisco IOS 15.3S, Performance Routing Engine (PRE) module

CVE-2015-4200High
A memory leak in the Performance Routing Engine (PRE) module in Cisco IOS 15.3S allows remote attackers to cause a denial of service by triggering an error during CPE negotiation.

Original NVD description (English source)

Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (NULL pointer free and module crash) by triggering intermittent connectivity with many IPv6 CPE devices, aka Bug ID CSCug47366.