ID de Prueba:	1.3.6.1.4.1.25623.1.0.106722
Categoría:	CISCO
Título:	Cisco IOS XR Software Denial of Service Vulnerability (cisco-sa-20170405-ios)
Resumen:	A vulnerability in Google-defined remote procedure call (gRPC); handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the; Event Management Service daemon (emsd) to crash due to a system memory leak, resulting in a; denial of service (DoS) condition.
Descripción:	Summary: A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon (emsd) to crash due to a system memory leak, resulting in a denial of service (DoS) condition. Vulnerability Insight: The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this vulnerability by sending malformed gRPC requests repeatedly to the affected device. Vulnerability Impact: An exploit could allow the attacker to cause the emsd process to crash. Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-6599 BugTraq ID: 97464 http://www.securityfocus.com/bid/97464 http://www.securitytracker.com/id/1038191
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.