Test ID:	1.3.6.1.4.1.25623.1.0.106448
Category:	CISCO
Title:	Cisco IOS XR Software HTTP 2.0 Request Handling Event Service Daemon Denial of Service Vulnerability (cisco-sa-20161207-ios-xr)
Summary:	A vulnerability in the HTTP 2.0 request handling code of Cisco; IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management; Service daemon (emsd) to crash, resulting in a denial of service (DoS) condition.
Description:	Summary: A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon (emsd) to crash, resulting in a denial of service (DoS) condition. Vulnerability Insight: The vulnerability is due to improper handling of HTTP requests. An attacker could exploit this vulnerability by sending malicious HTTP 2.0 requests to the targeted system. Vulnerability Impact: An exploit could allow the attacker to cause the emsd to crash. Solution: See the referenced vendor advisory for a solution. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9205 BugTraq ID: 94813 http://www.securityfocus.com/bid/94813
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.