CVE-2015-0631: Race Condition
Published Feb 21, 2015
·Updated
Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688.
Affected Software
13 affected components
Cisco Ips Sensor Software=7.2\(1\)e4
Cisco Ips Sensor Software=7.2\(2\)e4
Cisco Ids 4210
Cisco Ids 4215
Cisco Ids 4220
Cisco Ids 4230
Cisco Ids 4235
Cisco Ids 4250
Cisco Ids 4250 Xl
Cisco Ips 4240
Cisco Ips 4255
Cisco Ips 4260
Cisco Ips 4270
Event History
Feb 21, 2015
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0631?
CVE-2015-0631 is classified as a denial of service vulnerability.
2
How do I fix CVE-2015-0631?
To mitigate CVE-2015-0631, upgrade to a patched version of the Cisco IPS or IDS software provided by Cisco.
3
Who is affected by CVE-2015-0631?
CVE-2015-0631 affects Cisco IPS Sensor Software versions 7.2(1)e4 and 7.2(2)e4.
4
What type of attack does CVE-2015-0631 enable?
CVE-2015-0631 allows remote attackers to cause a denial of service by overwhelming the management interface.
5
When was CVE-2015-0631 disclosed?
CVE-2015-0631 was disclosed in early 2015.