Cisco IOS XR Software CVE-2015-0657 RSVP Packet Parsing Denial of Service Vulnerability

Bugtraq ID:	72945
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-0657
Remote:	Yes
Local:	No
Published:	Mar 05 2015 12:00AM
Updated:	Mar 05 2015 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS XR Software 0
Not Vulnerable:

Cisco IOS XR Software CVE-2015-0657 RSVP Packet Parsing Denial of Service Vulnerability

Cisco IOS XR is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause the RSVP process on the affected device to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCur69192.

Cisco IOS XR Software CVE-2015-0657 RSVP Packet Parsing Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS XR Software CVE-2015-0657 RSVP Packet Parsing Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS XR Software CVE-2015-0657 RSVP Packet Parsing Denial of Service Vulnerability

References:

• Cisco Security Notice Cisco IOS XR Software Malformed RSVP Packet Denial of Ser (Cisco)
  
• Cisco Homepage (Cisco )
  
• Cisco IOS XR Software Homepage (Cisco)