Cisco IOS and IOS XE Software CVE-2015-0646 Denial of Service Vulnerability

BID:73340

Info

Cisco IOS and IOS XE Software CVE-2015-0646 Denial of Service Vulnerability

Bugtraq ID: 73340
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2015-0646
Remote: Yes
Local: No
Published: Mar 25 2015 12:00AM
Updated: May 23 2017 04:24PM
Credit: Cisco
Vulnerable: Rockwell Automation Stratix 5900 0
Cisco Ios Xe 3.9S.2
Cisco IOS XE 3.9S.1
Cisco IOS XE 3.9S.0
Cisco Ios Xe 3.8S.2
Cisco Ios Xe 3.8S.1
Cisco Ios Xe 3.8S.0
Cisco IOS XE 3.8s
Cisco Ios Xe 3.6E.1
Cisco Ios Xe 3.5E.3
Cisco Ios Xe 3.5E.2
Cisco Ios Xe 3.5E.1
Cisco Ios Xe 3.5E.0
Cisco Ios Xe 3.3XO.2
Cisco Ios Xe 3.3XO.1
Cisco Ios Xe 3.3XO.0
Cisco Ios Xe 3.12S.1
Cisco Ios Xe 3.12S.0
Cisco Ios Xe 3.11S.3
Cisco IOS XE 3.11S.2
Cisco IOS XE 3.11S.1
Cisco Ios Xe 3.11S.0
Cisco Ios Xe 3.10S.4
Cisco Ios Xe 3.10S.3
Cisco Ios Xe 3.10S.2
Cisco Ios Xe 3.10S.1
Cisco Ios Xe 3.10S.0a
Cisco IOS XE 3.10S.0
Cisco IOS 15.4T
Cisco Ios 15.4SN
Cisco IOS 15.4S
Cisco IOS 15.4CG
Cisco Ios 15.4(3)S0c
Cisco Ios 15.4(3)S0b
Cisco IOS 15.4(2)T2
Cisco IOS 15.4(2)T1
Cisco IOS 15.4(2)T
Cisco Ios 15.4(2)SN1
Cisco Ios 15.4(2)SN
Cisco Ios 15.4(2)S2
Cisco Ios 15.4(2)S1
Cisco IOS 15.4(2)S
Cisco IOS 15.4(2)CG
Cisco IOS 15.4(1)T3
Cisco IOS 15.4(1)T2
Cisco IOS 15.4(1)T1
Cisco Ios 15.4(1)S3
Cisco IOS 15.4(1)S2
Cisco IOS 15.4(1)S1
Cisco IOS 15.4(1)S0c
Cisco IOS 15.4(1)S0b
Cisco IOS 15.4(1)S0a
Cisco IOS 15.4(1)S
Cisco IOS 15.4(1)CG1
Cisco IOS 15.4(1)CG
Cisco Ios 15.3XB
Cisco IOS 15.3T
Cisco IOS 15.3S
Cisco IOS 15.3M
Cisco Ios 15.3JNB
Cisco Ios 15.3JN
Cisco Ios 15.3JAB
Cisco Ios 15.3JAA
Cisco IOS 15.3JA
Cisco Ios 15.3(3)XB12
Cisco Ios 15.3(3)S4
Cisco IOS 15.3(3)S3
Cisco IOS 15.3(3)S2a
Cisco IOS 15.3(3)S2
Cisco Ios 15.3(3)S1a
Cisco Ios 15.3(3)S1
Cisco IOS 15.3(3)S
Cisco IOS 15.3(3)M4
Cisco IOS 15.3(3)M3
Cisco IOS 15.3(3)M2
Cisco IOS 15.3(3)M1
Cisco Ios 15.3(3)JNB
Cisco Ios 15.3(3)JN
Cisco Ios 15.3(3)JAB1
Cisco Ios 15.3(3)JAB
Cisco Ios 15.3(3)JAA
Cisco IOS 15.3(3)JA75
Cisco Ios 15.3(3)JA1n
Cisco Ios 15.3(3)JA1m
Cisco Ios 15.3(3)JA100
Cisco Ios 15.3(3)JA1
Cisco Ios 15.3(3)JA
Cisco IOS 15.3(2)T3
Cisco IOS 15.3(2)T2
Cisco IOS 15.3(2)T1
Cisco IOS 15.3(2)T
Cisco IOS 15.3(2)S2
Cisco IOS 15.3(2)S1b
Cisco IOS 15.3(2)S1
Cisco IOS 15.3(2)S0a
Cisco IOS 15.3(2)S
Cisco IOS 15.3(1)T4
Cisco IOS 15.3(1)T3
Cisco IOS 15.3(1)T2
Cisco IOS 15.3(1)T1
Cisco IOS 15.3(1)T
Cisco IOS 15.3(1)S2
Cisco IOS 15.3(1)S1e
Cisco IOS 15.3(1)S1
Cisco IOS 15.3(1)S
Cisco IOS 15.2XB
Cisco IOS 15.2M
Cisco Ios 15.2JN
Cisco Ios 15.2JB
Cisco Ios 15.2JAZ
Cisco IOS 15.2JA
Cisco IOS 15.2GC
Cisco Ios 15.2EY
Cisco IOS 15.2EX
Cisco IOS 15.2E
Cisco Ios 15.2(4)XB11
Cisco IOS 15.2(4)XB10
Cisco Ios 15.2(4)M7
Cisco Ios 15.2(4)M6b
Cisco Ios 15.2(4)M6a
Cisco IOS 15.2(4)M6
Cisco IOS 15.2(4)M5
Cisco IOS 15.2(4)M4
Cisco IOS 15.2(4)M3
Cisco IOS 15.2(4)M2
Cisco IOS 15.2(4)M1
Cisco IOS 15.2(4)M
Cisco Ios 15.2(4)JN
Cisco Ios 15.2(4)JB6
Cisco Ios 15.2(4)JB5m
Cisco Ios 15.2(4)JB5h
Cisco Ios 15.2(4)JB50a
Cisco Ios 15.2(4)JB50
Cisco Ios 15.2(4)JB5
Cisco IOS 15.2(4)JB4
Cisco IOS 15.2(4)JB3s
Cisco Ios 15.2(4)JB3h
Cisco IOS 15.2(4)JB3b
Cisco Ios 15.2(4)JB3a
Cisco Ios 15.2(4)JB3
Cisco Ios 15.2(4)JB2
Cisco Ios 15.2(4)JB1
Cisco Ios 15.2(4)JAZ
Cisco Ios 15.2(4)JA1
Cisco Ios 15.2(4)GC3
Cisco Ios 15.2(4)GC2
Cisco IOS 15.2(4)GC1
Cisco IOS 15.2(4)GC
Cisco Ios 15.2(2b)E
Cisco Ios 15.2(2a)E1
Cisco Ios 15.2(2)JB1
Cisco Ios 15.2(2)E1
Cisco IOS 15.2(2)E
Cisco Ios 15.2(1)EY1
Cisco Ios 15.2(1)EY
Cisco Ios 15.2(1)EX
Cisco IOS 15.2(1)E3
Cisco IOS 15.2(1)E2
Cisco IOS 15.2(1)E1
Cisco IOS 15.2(1)E
Cisco IOS 15.0ED
Cisco IOS 15.0(2)ED1
Cisco Ios 12.4JAZ
Cisco Ios 12.4JAP
Cisco Ios 12.4JAM
Cisco Ios 12.4(25e)JAZ1
Cisco Ios 12.4(25e)JAP1m
Cisco Ios 12.4(25e)JAM1
Cisco IOS 12.2SX
Cisco IOS 12.2SQ
Cisco IOS 12.2IRE
Cisco IOS 12.2IRD
Cisco IOS 12.2(44)SQ1
Cisco Ios 12.2(33)SXI4b
Cisco IOS 12.2(33)IRE3
Cisco IOS 12.2(33)IRD1
Not Vulnerable: Rockwell Automation Stratix 5900 15.6.3

Discussion

Cisco IOS and IOS XE Software CVE-2015-0646 Denial of Service Vulnerability

Cisco IOS and IOS XE Software are prone to a remote denial-of-service vulnerability.

Successful exploits may allow attackers to cause a memory leak and reload of an affected device, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCum94811.

Exploit / POC

Cisco IOS and IOS XE Software CVE-2015-0646 Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Solution / Fix

Cisco IOS and IOS XE Software CVE-2015-0646 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

References

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report