CVE-2015-4203: Race Condition
Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service (PXF process crash) by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-4203?
CVE-2015-4203 has a CVSS score indicating a high severity vulnerability that can lead to a denial of service.
How do I fix CVE-2015-4203?
To fix CVE-2015-4203, upgrade to a non-vulnerable version of Cisco IOS that addresses the race condition.
What devices are affected by CVE-2015-4203?
CVE-2015-4203 specifically affects Cisco IOS 12.2SCH on uBR10000 devices when certain configurations are in use.
What type of attack is associated with CVE-2015-4203?
CVE-2015-4203 is associated with a denial-of-service attack made possible by sending malformed MPLS 6VPE packets.
Is there a workaround for CVE-2015-4203?
Currently, there are no documented workarounds for CVE-2015-4203 except to apply the relevant software updates.