CVE-2015-6432
First published: Tue Jan 05 2016(Updated: )
Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service (device reload) via a crafted update, aka Bug ID CSCuw83486.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XRv 9000 | =4.2.0 | |
| Cisco IOS XRv 9000 | =4.3.0 | |
| Cisco IOS XRv 9000 | =5.0.0 | |
| Cisco IOS XRv 9000 | =5.1.0 | |
| Cisco IOS XRv 9000 | =5.2.0 | |
| Cisco IOS XRv 9000 | =5.2.2 | |
| Cisco IOS XRv 9000 | =5.2.4 | |
| Cisco IOS XRv 9000 | =5.3.0 | |
| Cisco IOS XRv 9000 | =5.3.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-6432?
CVE-2015-6432 has a high severity rating due to its potential to cause remote denial of service.
How do I fix CVE-2015-6432?
To fix CVE-2015-6432, upgrade your Cisco IOS XR to a version that is not affected by this vulnerability.
What systems are affected by CVE-2015-6432?
CVE-2015-6432 affects Cisco IOS XR versions 4.2.0, 4.3.0, and 5.0.0 through 5.3.2.
What type of attack is possible with CVE-2015-6432?
CVE-2015-6432 allows attackers to perform a denial of service attack resulting in device reloads via crafted OSPF LSA opaque area updates.
Is there a workaround for CVE-2015-6432?
There are no specific workarounds for CVE-2015-6432; the recommended action is to update to a secure version.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xrv 9000
- version/cisco ios xrv 9000/4.2.0
- version/cisco ios xrv 9000/4.3.0
- version/cisco ios xrv 9000/5.0.0
- version/cisco ios xrv 9000/5.1.0
- version/cisco ios xrv 9000/5.2.0
- version/cisco ios xrv 9000/5.2.2
- version/cisco ios xrv 9000/5.2.4
- version/cisco ios xrv 9000/5.3.0
- version/cisco ios xrv 9000/5.3.2