CVE-2016-6355 in IOS XR

Resumen

por MITRE

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets, aka Bug ID CSCux26791.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 2016-07-26
• Divulgación: 2016-08-22
• Moderación: aceptado
• Artículo: VDB-90722
• CPE: listo
• CWE: CWE-399 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00743
• KEV: no
• Actividades: muy bajo
• Sector: Hospital, Pharma, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-6355
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-6355
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-6355/