CVE-2016-1407
HighSummary
Cisco IOS XR versions up to 5.3.2 mishandle Local Packet Transport Services (LPTS) flow-based entries, allowing remote attackers to cause a denial of service (session drop) by making many connection attempts to open TCP ports.
Risk Assessment
Attackers can exploit this vulnerability to disrupt service availability, potentially leading to significant operational issues.
Recommendation
It is recommended to update Cisco IOS XR to the latest version to mitigate this vulnerability and to monitor connection attempts on open TCP ports.
Other vulnerabilities in Cisco IOS XR
See all- CVE-2016-6428High
Cisco IOS XR version 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging admin privileges.
- CVE-2016-1456High
The CLI in Cisco IOS XR versions 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access.
- CVE-2015-6432High
Cisco IOS XR versions 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 do not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area updates, allowing remote attackers to cause a denial of service (device reload) via a crafted update.
- CVE-2015-0618High
Cisco IOS XR versions 5.0.1 and 5.2.1 on Network Convergence System 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X devices allow remote attackers to cause a denial of service (line-card reload) via malformed IPv6 packets with extension headers.
- CVE-2014-3353High
Cisco IOS XR 4.3(.2) and earlier, used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service by sending a malformed IPv6 packet.
Original NVD description (English source)
Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of service (session drop) by making many connection attempts to open TCP ports, aka Bug ID CSCux95576.