Vulnerability Bulletins |
Cisco IOS XE Software IPv6 Neighbor Discovery Denial of Service Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the IPv6 neighbor discovery (ND) handling of Cisco IOS XE Software on ASR platforms could allow an unauthenticated, adjacent attacker to cause an affected device to crash.The vulnerability is due to insufficient bounds on internal tables. An attacker could exploit this vulnerability by flooding an adjacent IOS XE device with specific ND messages. An exploit could allow the attacker to deplete the available memory, possibly causing an affected device to crash.Cisco has More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151214-ios?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20IOS%20XE%20Software%20IPv6%20Neighbor%20Discovery%20Denial%20of%20Serv |
|