Cisco IOS Software Virtual Routing and Forwarding Subsystem Denial of Service Vulnerability

Bugtraq ID:	73338
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-0638
Remote:	Yes
Local:	No
Published:	Mar 25 2015 12:00AM
Updated:	Mar 25 2015 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS 15.3S Cisco Ios 15.3JAB Cisco IOS 15.3JA Cisco Ios 15.3(3)JNB Cisco Ios 15.3(3)JN Cisco Ios 15.3(3)JAB1 Cisco Ios 15.3(3)JA1n Cisco IOS 15.3(2)S2 Cisco IOS 15.2XA Cisco IOS 15.2T Cisco Ios 15.2JB Cisco Ios 15.2JAX Cisco IOS 15.2JA Cisco IOS 15.2GC Cisco IOS 15.2EX Cisco IOS 15.2(3)XA Cisco IOS 15.2(3)T1 Cisco IOS 15.2(2)T3 Cisco IOS 15.2(2)T2 Cisco IOS 15.2(2)T1 Cisco Ios 15.2(2)JB4 Cisco Ios 15.2(2)JB1 Cisco Ios 15.2(2)JAX1 Cisco IOS 15.2(2)JA1 Cisco IOS 15.2(2)GC Cisco Ios 15.2(1)EX Cisco IOS 15.0ED Cisco IOS 15.0(2)ED1 Cisco Ios 12.4JAZ Cisco Ios 12.4JAP Cisco Ios 12.4JAM Cisco Ios 12.4(25e)JAZ1 Cisco Ios 12.4(25e)JAP1m Cisco Ios 12.4(25e)JAM1 Cisco IOS 12.2SXI Cisco IOS 12.2SQ Cisco IOS 12.2IRE Cisco IOS 12.2IRD Cisco IOS 12.2(44)SQ1 Cisco Ios 12.2(33)SXI4b Cisco IOS 12.2(33)IRE3 Cisco IOS 12.2(33)IRD1
Not Vulnerable:

Cisco IOS Software Virtual Routing and Forwarding Subsystem Denial of Service Vulnerability

Cisco IOS Software is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause the VRF interface on the device to enter a wedged state and stop processing packets, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCsi02145.

Cisco IOS Software Virtual Routing and Forwarding Subsystem Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS Software Virtual Routing and Forwarding Subsystem Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS Software Virtual Routing and Forwarding Subsystem Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Vulnerability Alert: Cisco IOS Software Virtual Routing and Forwarding ICMP Queu (Cisco)
  
• Cisco Security Advisory Cisco IOS Software Virtual Routing and Forwarding ICMP Q (Cisco)