Vulnerabilities > CVE-2015-4293 - Resource Management Errors vulnerability in Cisco IOS XE

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

cisco

CWE-399

NVD

Published: 2015-07-30

Updated: 2015-08-21

Summary

The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XE 2.1.0 Cisco IOS XE 2.1.1 Cisco IOS XE 2.1.2 Cisco IOS XE 2.2.1 Cisco IOS XE 2.2.2 Cisco IOS XE 2.2.3 Cisco IOS XE 2.3.0 Cisco IOS XE 2.3.0T Cisco IOS XE 2.3.1T Cisco IOS XE 2.3.2 Cisco IOS XE 2.4.0 Cisco IOS XE 2.4.1 Cisco IOS XE 2.5.0 Cisco IOS XE 2.5.1 Cisco IOS XE 2.5.2 Cisco IOS XE 2.6.0 Cisco IOS XE 2.6.1 Cisco IOS XE 2.6.2 Cisco IOS XE 3.10S.0 Cisco IOS XE 3.10S.0A Cisco IOS XE 3.10S.1 Cisco IOS XE 3.10S.2 Cisco IOS XE 3.10S.3 Cisco IOS XE 3.11S.0 Cisco IOS XE 3.11S.1 Cisco IOS XE 3.11S.2 Cisco IOS XE 3.12S.0 Cisco IOS XE 3.12S.1 Cisco IOS XE 3.13S.0	29

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References