CVE-2016-6355

High

Published: 23/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A memory leak in Cisco IOS XR versions 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets.

Risk Assessment

Attackers can exploit this vulnerability to disrupt system operation, potentially leading to service unavailability.

Recommendation

It is recommended to update the system to the latest version to mitigate this vulnerability and to monitor network traffic for potential attacks.

Other vulnerabilities in Cisco IOS XR na urządzeniach ASR 9001

CVE-2015-0695High
Cisco IOS XR versions 4.3.4 through 5.3.0 on ASR 9000 devices have an issue with handling bridge-group virtual interface (BVI) traffic when uRPF, PBR, QoS, or an ACL is configured. This can allow remote attackers to cause a denial of service by triggering chip and card hangs and reloads.

Original NVD description (English source)

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets, aka Bug ID CSCux26791.