Skip to content
OpenAdvisories
Unscored CVE-2017-6599 EUVD-2017-15653GHSA-rfg9-w7rm-553m

A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote att…

Published Apr 7, 2017 · Updated Aug 5, 2024 · Assigned by cisco

Description

A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon (emsd) to crash due to a system memory leak, resulting in a denial of service (DoS) condition. This vulnerability affects Cisco IOS XR Software with gRPC enabled. More Information: CSCvb14433. Known Affected Releases: 6.1.1.BASE 6.2.1.BASE. Known Fixed Releases: 6.2.1.22i.MGBL 6.1.22.9i.MGBL 6.1.21.12i.MGBL 6.1.2.13i.MGBL.

Affected products

VendorProductAffectedFixed
— Cisco IOS XR Software Cisco IOS XR Software —

References