Buffer overflow in Cisco iOS

CVE-2015-6359

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS 15.3(3)S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a denial of service (memory consumption or device crash) via a flood of crafted ND messages, aka Bug ID CSCup28217.

Vulnerability class: Buffer Overflow

EPSS: 0.009 (56.2th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 15.2\(4\)e, 15.2\(4\)pi, 15.2\(4\)st
  • N/a — versions n/a

Weakness classification (CWE)

References