The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reload) via crafted network traffic that triggers incorrect kernel-timer handling, aka Bug ID CSCuh25672.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios | Cisco | * | 15.4(2)t3 (including) |
| Ios | Cisco | 15.4(1)t (including) | 15.4(1)t (including) |
| Ios | Cisco | 15.4(1)t1 (including) | 15.4(1)t1 (including) |
| Ios | Cisco | 15.4(1)t2 (including) | 15.4(1)t2 (including) |
| Ios | Cisco | 15.4(1)t3 (including) | 15.4(1)t3 (including) |
| Ios | Cisco | 15.4(1)t4 (including) | 15.4(1)t4 (including) |
| Ios | Cisco | 15.4(2)t (including) | 15.4(2)t (including) |
| Ios | Cisco | 15.4(2)t1 (including) | 15.4(2)t1 (including) |
| Ios | Cisco | 15.4(2)t2 (including) | 15.4(2)t2 (including) |
| Ios | Cisco | 15.4t (including) | 15.4t (including) |
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0592
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37416
- http://www.securitytracker.com/id/1031713
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100758
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0592
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37416
- http://www.securitytracker.com/id/1031713
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100758