Unscored CVE-2015-6273 EUVD-2015-6215GHSA-p5j7-x6wq-vh9r

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly (VFR) by certain firewall and …

Published Aug 29, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly (VFR) by certain firewall and NAT components, which allows remote attackers to cause a denial of service (Embedded Services Processor crash) via crafted IP packets, aka Bug IDs CSCtf87624, CSCte93229, CSCtd19103, and CSCti63623.

References

1033408 vdb-entry
20150827 Cisco IOS XE VFR Feature Denial of Service Vulnerabilities vendor-advisory