Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service (memory consumption and device reload) by sending malformed IKEv2 packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCuo75572.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios_xe | Cisco | 3.2s.0 (including) | 3.2s.0 (including) |
| Ios_xe | Cisco | 3.2s.1 (including) | 3.2s.1 (including) |
| Ios_xe | Cisco | 3.2s.2 (including) | 3.2s.2 (including) |
| Ios_xe | Cisco | 3.3sg.0 (including) | 3.3sg.0 (including) |
| Ios_xe | Cisco | 3.3sg.1 (including) | 3.3sg.1 (including) |
| Ios_xe | Cisco | 3.3sg.2 (including) | 3.3sg.2 (including) |
| Ios_xe | Cisco | 3.3xo.0 (including) | 3.3xo.0 (including) |
| Ios_xe | Cisco | 3.3xo.1 (including) | 3.3xo.1 (including) |
| Ios_xe | Cisco | 3.3xo.2 (including) | 3.3xo.2 (including) |
| Ios_xe | Cisco | 3.4s.0 (including) | 3.4s.0 (including) |
| Ios_xe | Cisco | 3.4s.1 (including) | 3.4s.1 (including) |
| Ios_xe | Cisco | 3.4s.2 (including) | 3.4s.2 (including) |
| Ios_xe | Cisco | 3.4s.3 (including) | 3.4s.3 (including) |
| Ios_xe | Cisco | 3.4s.4 (including) | 3.4s.4 (including) |
| Ios_xe | Cisco | 3.4s.5 (including) | 3.4s.5 (including) |
| Ios_xe | Cisco | 3.4s.6 (including) | 3.4s.6 (including) |
| Ios_xe | Cisco | 3.4sg.0 (including) | 3.4sg.0 (including) |
| Ios_xe | Cisco | 3.4sg.1 (including) | 3.4sg.1 (including) |
| Ios_xe | Cisco | 3.4sg.2 (including) | 3.4sg.2 (including) |
| Ios_xe | Cisco | 3.4sg.3 (including) | 3.4sg.3 (including) |
| Ios_xe | Cisco | 3.4sg.4 (including) | 3.4sg.4 (including) |
| Ios_xe | Cisco | 3.4sg.5 (including) | 3.4sg.5 (including) |
| Ios_xe | Cisco | 3.5e.0 (including) | 3.5e.0 (including) |
| Ios_xe | Cisco | 3.5e.1 (including) | 3.5e.1 (including) |
| Ios_xe | Cisco | 3.5e.2 (including) | 3.5e.2 (including) |
| Ios_xe | Cisco | 3.5e.3 (including) | 3.5e.3 (including) |
| Ios_xe | Cisco | 3.5s.0 (including) | 3.5s.0 (including) |
| Ios_xe | Cisco | 3.5s.1 (including) | 3.5s.1 (including) |
| Ios_xe | Cisco | 3.5s.2 (including) | 3.5s.2 (including) |
| Ios_xe | Cisco | 3.5s_base (including) | 3.5s_base (including) |
| Ios_xe | Cisco | 3.6e.0 (including) | 3.6e.0 (including) |
| Ios_xe | Cisco | 3.6e.1 (including) | 3.6e.1 (including) |
| Ios_xe | Cisco | 3.6s.0 (including) | 3.6s.0 (including) |
| Ios_xe | Cisco | 3.6s.1 (including) | 3.6s.1 (including) |
| Ios_xe | Cisco | 3.6s.2 (including) | 3.6s.2 (including) |
| Ios_xe | Cisco | 3.6s_base (including) | 3.6s_base (including) |
| Ios_xe | Cisco | 3.7s.1 (including) | 3.7s.1 (including) |
| Ios_xe | Cisco | 3.7s.2 (including) | 3.7s.2 (including) |
| Ios_xe | Cisco | 3.7s.3 (including) | 3.7s.3 (including) |
| Ios_xe | Cisco | 3.7s.4 (including) | 3.7s.4 (including) |
| Ios_xe | Cisco | 3.7s.5 (including) | 3.7s.5 (including) |
| Ios_xe | Cisco | 3.7s.6 (including) | 3.7s.6 (including) |
| Ios_xe | Cisco | 3.7s_base (including) | 3.7s_base (including) |
| Ios_xe | Cisco | 3.8s.0 (including) | 3.8s.0 (including) |
| Ios_xe | Cisco | 3.8s.1 (including) | 3.8s.1 (including) |
| Ios_xe | Cisco | 3.8s.2 (including) | 3.8s.2 (including) |
| Ios_xe | Cisco | 3.8s_base (including) | 3.8s_base (including) |
| Ios_xe | Cisco | 3.9s.0 (including) | 3.9s.0 (including) |
| Ios_xe | Cisco | 3.9s.1 (including) | 3.9s.1 (including) |
| Ios_xe | Cisco | 3.9s.2 (including) | 3.9s.2 (including) |
| Ios_xe | Cisco | 3.10s.0 (including) | 3.10s.0 (including) |
| Ios_xe | Cisco | 3.10s.0a (including) | 3.10s.0a (including) |
| Ios_xe | Cisco | 3.10s.1 (including) | 3.10s.1 (including) |
| Ios_xe | Cisco | 3.10s.2 (including) | 3.10s.2 (including) |
| Ios_xe | Cisco | 3.11s.0 (including) | 3.11s.0 (including) |
| Ios_xe | Cisco | 3.11s.1 (including) | 3.11s.1 (including) |
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ikev2
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37815
- http://www.securityfocus.com/bid/73333
- http://www.securitytracker.com/id/1031978
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-ikev2
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37815
- http://www.securityfocus.com/bid/73333
- http://www.securitytracker.com/id/1031978