Cisco IOS Software CVE-2015-4204 Denial of Service Vulnerability

Bugtraq ID:	75337
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2015-4204
Remote:	Yes
Local:	No
Published:	Jun 22 2015 12:00AM
Updated:	Jun 22 2015 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS 12.2(33) Cisco IOS 12.2
Not Vulnerable:

Cisco IOS Software CVE-2015-4204 Denial of Service Vulnerability

Cisco IOS Software is prone to a remote denial-of-service vulnerability.

Note: Cisco uBR10000 Series Universal Broadband Routers running Cisco IOS Software are only affected.

Attackers can exploit this issue to cause the PXF process in the PRE module on an affected device to crash, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCue65051.

Cisco IOS Software CVE-2015-4204 Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS Software CVE-2015-4204 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS Software CVE-2015-4204 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco IOS Homepage (Cisco Systems)
  
• Cisco IOS Software UBR Devices SNMP Subsystem Denial of Service Vulnerability (Cisco)