Cisco IOS XR Software ICMPv6 Processing Denial of Service Vulnerability

Bugtraq ID:	66658
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-2144
Remote:	Yes
Local:	No
Published:	Apr 04 2014 12:00AM
Updated:	Apr 08 2014 12:38AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco IOS XR Software ICMPv6 Processing Denial of Service Vulnerability

Cisco IOS XR is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause all or most of the IPv4 and IPv6 traffic to fail while being processed on an affected device, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCum14266.

Cisco IOS XR Software ICMPv6 Processing Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS XR Software ICMPv6 Processing Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS XR Software ICMPv6 Processing Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco IOS XR Software Homepage (Cisco)