Buffer overflow in Cisco Asr 1000
CVE-2015-6274
The IPv4 implementation on Cisco ASR 1000 devices with software 15.5(3)S allows remote attackers to cause a denial of service (ESP QFP CPU consumption) by triggering packet fragmentation and reassembly, aka Bug ID CSCuv71273.
Vulnerability class: Buffer Overflow
EPSS: 0.017 (75.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Asr_1000
- Cisco Asr_1000_series_software — versions 15.5\(3\)s
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)