CVE-2015-4293

Published: Jul 30, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (CPU consumption or packet loss) via fragmented (1) IPv4 or (2) IPv6 packets that trigger ATTN-3-SYNC_TIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957.

Affected (29)

Products: Cisco: Ios Xe

Cisco

1 product

Ios Xe

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 2.1.0
Cisco Ios Xe	Version 2.1.1
Cisco Ios Xe	Version 2.1.2
Cisco Ios Xe	Version 2.2.1
Cisco Ios Xe	Version 2.2.2
Cisco Ios Xe	Version 2.2.3
Cisco Ios Xe	Version 2.3.0
Cisco Ios Xe	Version 2.3.0t
Cisco Ios Xe	Version 2.3.1t
Cisco Ios Xe	Version 2.3.2
Cisco Ios Xe	Version 2.4.0
Cisco Ios Xe	Version 2.4.1
Cisco Ios Xe	Version 2.5.0
Cisco Ios Xe	Version 2.5.1
Cisco Ios Xe	Version 2.5.2
Cisco Ios Xe	Version 2.6.0
Cisco Ios Xe	Version 2.6.1
Cisco Ios Xe	Version 2.6.2
Cisco Ios Xe	Version 3.10s.0
Cisco Ios Xe	Version 3.10s.0a
Cisco Ios Xe	Version 3.10s.1
Cisco Ios Xe	Version 3.10s.2
Cisco Ios Xe	Version 3.10s.3
Cisco Ios Xe	Version 3.11s.0
Cisco Ios Xe	Version 3.11s.1
Cisco Ios Xe	Version 3.11s.2
Cisco Ios Xe	Version 3.12s.0
Cisco Ios Xe	Version 3.12s.1
Cisco Ios Xe	Version 3.13s.0

Related CWEs

CWE-399

References (4)

http://tools.cisco.com/security/center/viewAlert.x?alertId=40215

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1033122

Source: psirt@cisco.com

http://tools.cisco.com/security/center/viewAlert.x?alertId=40215

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1033122

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.