Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service (NPU ASIC scan and line-card reload) via crafted IPv6 extension headers, aka Bug ID CSCtx03546.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios_xr_software | Cisco | 4.0.1 (including) | 4.0.1 (including) |
| Ios_xr_software | Cisco | 4.0.2 (including) | 4.0.2 (including) |
| Ios_xr_software | Cisco | 4.0.3 (including) | 4.0.3 (including) |
| Ios_xr_software | Cisco | 4.0.4 (including) | 4.0.4 (including) |
| Ios_xr_software | Cisco | 4.0.11 (including) | 4.0.11 (including) |
| Ios_xr_software | Cisco | 4.1.0 (including) | 4.1.0 (including) |
| Ios_xr_software | Cisco | 4.1.1 (including) | 4.1.1 (including) |
| Ios_xr_software | Cisco | 4.1.2 (including) | 4.1.2 (including) |
| Ios_xr_software | Cisco | 4.1_base (including) | 4.1_base (including) |
| Ios_xr_software | Cisco | 4.2.0 (including) | 4.2.0 (including) |