CVE-2015-4200

High

Published: 23/06/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

A memory leak in the Performance Routing Engine (PRE) module in Cisco IOS 15.3S allows remote attackers to cause a denial of service by triggering an error during CPE negotiation.

Risk Assessment

Attackers can exploit this vulnerability to exhaust memory resources, leading to device unavailability. This may impact the continuity of services within the organization.

Recommendation

It is recommended to update Cisco IOS software to the latest version to mitigate this vulnerability. Monitoring system logs for potential attack attempts is also advisable.

Other vulnerabilities in Cisco IOS 15.3S, Performance Routing Engine (PRE) module

CVE-2015-4199High
A race condition in the Performance Routing Engine (PRE) module in Cisco IOS 15.3S allows remote attackers to cause a denial of service by triggering module crashes.

Original NVD description (English source)

Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote attackers to cause a denial of service (memory consumption) by triggering an error during CPE negotiation, aka Bug ID CSCug00885.