Description
Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (process reload) by establishing many TCP sessions, aka Bug ID CSCuq45239.
References
- 20141125 Cisco IOS XR Software lighttpd TCP Session Vulnerability vendor-advisory
- 71287 vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36532
- 1031262 vdb-entry
- ciscoiosxr-cve20148005-dos(98937) vdb-entry