7.8
CVSSv2

CVE-2015-0640

Published: 26/03/2015 Updated: 04/09/2015
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

The high-speed logging (HSL) feature in Cisco IOS XE 2.x and 3.x prior to 3.10.4S, 3.11 prior to 3.11.3S, 3.12 prior to 3.12.1S, 3.13 prior to 3.13.0S, 3.14 prior to 3.14.0S, and 3.15 prior to 3.15.0S allows remote malicious users to cause a denial of service (device reload) via large IP packets that require NAT and HSL processing after fragmentation, aka Bug ID CSCuo25741.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios xe 3.1s.1

cisco ios xe 3.1s.3

cisco ios xe 3.5s

cisco ios xe 3.5s.0

cisco ios xe 3.7s.0

cisco ios xe 3.7s.2

cisco ios xe 3.9s.1

cisco ios xe 3.10s.0

cisco ios xe 3.12s.0

cisco ios xe 3.10s.3

cisco ios xe 3.1s.5

cisco ios xe 3.2s.3

cisco ios xe 3.2s.1

cisco ios xe 3.2s.2

cisco ios xe 3.3s.1

cisco ios xe 3.3s.2

cisco ios xe 3.7s.3

cisco ios xe 3.7s.4

cisco ios xe 3.8s

cisco ios xe 3.8s.0

cisco ios xe 3.8s.1

cisco ios xe 3.7s.6

cisco ios xe 3.9s.2

cisco ios xe 3.11s.0

cisco ios xe 3.12s.1

cisco ios xe 3.1s.0

cisco ios xe 3.2s.0

cisco ios xe 3.5s.2

cisco ios xe 3.6s.0

cisco ios xe 3.6s.1

cisco ios xe 3.6s.2

cisco ios xe 3.10s.1

cisco ios xe 3.10s.2

cisco ios xe 3.10s.0a

cisco ios xe 3.11s.1

cisco ios xe 3.3s.0

cisco ios xe 3.1s.2

cisco ios xe 3.6s

cisco ios xe 3.5s.1

cisco ios xe 3.7s

cisco ios xe 3.7s.1

cisco ios xe 3.8s.2

cisco ios xe 3.9s.0

cisco ios xe 3.11s.2

cisco ios xe 3.7s.5

cisco ios xe 3.1s.4

cisco ios xe 3.1s.6

cisco ios xe 3.7s.7

Vendor Advisories

Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers (ASR), Cisco 4400 Series Integrated Services Routers (ISR), and Cisco Cloud Services Routers (CSR) 1000v Series contains the following vulnerabilities: Cisco IOS XE Software Fragmented Packet Denial of Service Vulnerability Cisco IOS XE Software Crafted TCP Packet ...