Unscored CVE-2015-0695 EUVD-2015-0708GHSA-cgrr-qv6f-g8ww

Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group v…

Published Apr 17, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface (BVI) traffic, which allows remote attackers to cause a denial of service (chip and card hangs and reloads) by triggering use of a BVI interface for IPv4 packets, aka Bug ID CSCur62957.

References

1032139 vdb-entry
74162 vdb-entry
20150415 Cisco IOS XR Software BVI Routed Packet Denial of Service Vulnerability vendor-advisory