PT-2016-4783

CVE-2016-1433

·

Published

2016-09-14

·

Updated

2017-07-30

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 6.0 through 6.0.1
Description The issue is caused by insufficient logic in the processing of crafted OSPFv3 packets, allowing an unauthenticated, remote attacker to cause a reload of the OSPFv3 process. This results in a limited denial of service (DoS) condition on an affected device. An attacker could exploit this by sending crafted OSPFv3 packets to be processed by an affected device.
Recommendations For Cisco IOS XR versions 6.0 through 6.0.1, update to a newer version that addresses this issue, as software updates have been released by Cisco.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾