Cisco IOS IPv6 Processing Remote Denial Of Service Vulnerability

Bugtraq ID:	12368
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-0195
Remote:	Yes
Local:	No
Published:	Jan 26 2005 12:00AM
Updated:	Jul 12 2009 10:06AM
Credit:	The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue.
Vulnerable:	Cisco IOS 12.3YH Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3YE Cisco IOS 12.3YD Cisco IOS 12.3YA Cisco IOS 12.3XZ Cisco IOS 12.3XY Cisco IOS 12.3XX Cisco IOS 12.3XU Cisco IOS 12.3XT Cisco IOS 12.3XS Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XN Cisco IOS 12.3XM Cisco IOS 12.3XL Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XH Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XB Cisco IOS 12.3XA Cisco IOS 12.3T Cisco IOS 12.3JA Cisco IOS 12.3BW Cisco IOS 12.3BC Cisco IOS 12.3B Cisco IOS 12.3 Cisco IOS 12.2ZP Cisco IOS 12.2ZO Cisco IOS 12.2ZN Cisco IOS 12.2ZL Cisco IOS 12.2ZJ Cisco IOS 12.2ZJ Cisco IOS 12.2ZI Cisco IOS 12.2ZH Cisco IOS 12.2ZH Cisco IOS 12.2ZG Cisco IOS 12.2ZG Cisco IOS 12.2ZF Cisco IOS 12.2ZF Cisco IOS 12.2ZE Cisco IOS 12.2ZE Cisco IOS 12.2ZD Cisco IOS 12.2ZD Cisco IOS 12.2ZC Cisco IOS 12.2YZ Cisco IOS 12.2YZ Cisco IOS 12.2YV Cisco IOS 12.2YV Cisco IOS 12.2YU Cisco IOS 12.2YU Cisco IOS 12.2YT Cisco IOS 12.2YT Cisco IOS 12.2T Cisco IOS 12.2SZ Cisco IOS 12.2SZ Cisco IOS 12.2SY Cisco IOS 12.2SY Cisco IOS 12.2SXD Cisco IOS 12.2SXB Cisco IOS 12.2SXA Cisco IOS 12.2SX Cisco IOS 12.2SW Cisco IOS 12.2SV Cisco IOS 12.2SU Cisco IOS 12.2SE Cisco IOS 12.2S Cisco IOS 12.2MC Cisco IOS 12.2JK Cisco IOS 12.2EWA Cisco IOS 12.2EW Cisco IOS 12.2CZ Cisco IOS 12.2CX Cisco IOS 12.2CX Cisco IOS 12.2CX Cisco IOS 12.2BZ Cisco IOS 12.2BX Cisco IOS 12.2BC Cisco IOS 12.2B Cisco IOS 12.0SZ Cisco IOS 12.0SZ Cisco IOS 12.0SX Cisco IOS 12.0S
Not Vulnerable:

Cisco IOS IPv6 Processing Remote Denial Of Service Vulnerability

A remote denial of service vulnerability affects the IPv6 processing functionality of Cisco IOS. This issue is due to a failure of the affected operating system to properly handle specially crafted network data.

It is possible for an attacker to produce a sustained denial of service condition against an affected device by continually sending the malicious network data.

An attacker may leverage this issue to cause an affected device to reload, denying service to legitimate users.

Cisco IOS IPv6 Processing Remote Denial Of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Cisco IOS IPv6 Processing Remote Denial Of Service Vulnerability

Solution:
The vendor has released an advisory (cisco-sa-20050126-ipv6) and fixes to address this vulnerability. Customers are advised to peruse the referenced advisory for further information in regards to obtaining and applying appropriate updates.

Cisco IOS IPv6 Processing Remote Denial Of Service Vulnerability

References:

• Cisco Security Advisory: Multiple Crafted IPv6 Packets Cause Reload (Cisco)
  
• VU#472582 - Cisco IOS IPv6 denial-of-service vulnerability (US-CERT)