CVE-2016-6381
HighSummary
A vulnerability in Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allows remote attackers to cause a denial of service via fragmented IKEv1 packets, leading to memory consumption or device reload.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the operation of network devices, potentially leading to service outages.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability.
Other vulnerabilities in Cisco IOS and IOS XE
See all- CVE-2016-6384High
Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.6, as well as IOS XE versions 3.1 through 3.17 and 16.2, are vulnerable to an attack that can lead to denial of service via crafted fields in an H.323 message.
- CVE-2016-6382High
Cisco IOS versions 15.2 through 15.6 and IOS XE versions 3.6 through 3.17 and 16.1 are vulnerable to an attack that can cause a remote denial of service by a malformed IPv6 PIM register packet.
- CVE-2015-0643High
Cisco IOS versions 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4, as well as IOS XE versions 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S are vulnerable to denial of service attacks by sending malformed IKEv2 packets. Attackers can exploit this vulnerability to cause memory consumption and device reload.
- CVE-2015-0642High
Cisco IOS versions 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4, as well as IOS XE versions 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S are vulnerable to an attack that can cause a device reload by sending malformed IKEv2 packets. This vulnerability can be exploited over both IPv4 and IPv6 networks.
- CVE-2015-0637High
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS versions 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) via spoofed AN messages.
Original NVD description (English source)
Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented IKEv1 packets, aka Bug ID CSCuy47382.