Cisco IOS XR Software IPv6 Packet Handling CVE-2014-2176 Denial of Service Vulnerability

Bugtraq ID:	68005
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-2176
Remote:	Yes
Local:	No
Published:	Jun 11 2014 12:00AM
Updated:	Jun 11 2014 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Ios Xr 4.3.1 Cisco Ios Xr 4.3 Cisco Ios Xr 4.2.4 Cisco Ios Xr 4.2.3 Cisco Ios Xr 4.2 Cisco Ios Xr 4.1.2 Cisco Ios Xr 4.0.11 Cisco Ios Xr 4.0.4 Cisco Ios Xr 4.0.2 Cisco IOS XR 3.9.1 Cisco IOS XR 3.9 Cisco IOS XR 3.8.4 Cisco IOS XR 3.8.3 Cisco IOS XR 3.8.2 Cisco IOS XR 3.8.1 Cisco IOS XR 3.8 Cisco IOS XR 3.7.3 Cisco IOS XR 3.7.2 Cisco IOS XR 3.7.1 Cisco Ios Xr 5.1 Cisco Ios Xr 4.2.2 Cisco Ios Xr 4.2.1 Cisco Ios Xr 4.1.1 Cisco Ios Xr 4.1.0 Cisco Ios Xr 4.0.3 Cisco Ios Xr 4.0.1 Cisco Ios Xr 4.0.0 Cisco Ios Xr 3.9.2
Not Vulnerable:

Cisco IOS XR Software IPv6 Packet Handling CVE-2014-2176 Denial of Service Vulnerability

Cisco IOS XR is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause NP chip and a line card on an affected device to lockup and reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCun71928.

Cisco IOS XR Software IPv6 Packet Handling CVE-2014-2176 Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS XR Software IPv6 Packet Handling CVE-2014-2176 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS XR Software IPv6 Packet Handling CVE-2014-2176 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Vulnerability Alert Cisco IOS XR Software IPv6 Malformed Packet Denial of Servic (Cisco)
  
• Cisco IOS XR Software IPv6 Malformed Packet Denial of Service Vulnerability (Cisco)