CVE-2016-6355 in IOS XR

Sumário

de MITRE

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service (control-plane protocol outage) via crafted fragmented packets, aka Bug ID CSCux26791.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 26/07/2016
• Divulgação: 22/08/2016
• Moderação: aceite
• Entrada: VDB-90722
• CPE: pronto
• CWE: CWE-399 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00743
• KEV: não
• Atividades: muito baixo
• Sector: Pharma, Hostingprovider, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-6355
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-6355
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-6355/