Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.105646
Category:CISCO
Title:Cisco IOS XR for Cisco ASR 9000 Series Aggregation Services Routers Interface Flap Vulnerability (cisco-sa-20160412-asr)
Summary:A vulnerability in packet processing functions of Cisco IOS XR; Software running on Cisco ASR 9000 Series Aggregation Services Routers could allow an; unauthenticated, remote attacker to cause cyclic redundancy check (CRC) and symbol errors on the; receiving interface of an affected device, which may lead to an interface flap.
Description:Summary:
A vulnerability in packet processing functions of Cisco IOS XR
Software running on Cisco ASR 9000 Series Aggregation Services Routers could allow an
unauthenticated, remote attacker to cause cyclic redundancy check (CRC) and symbol errors on the
receiving interface of an affected device, which may lead to an interface flap.

Vulnerability Insight:
The vulnerability is due to improper processing of packets that
contain certain crafted bit patterns. An attacker could exploit this vulnerability by sending
crafted packets to be processed by a line card of an affected device.

Vulnerability Impact:
A successful exploit could allow the attacker to cause CRC and
symbol errors on the receiving interface of the device, which may lead to an interface flap.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2016-1376
Cisco Security Advisory: 20160412 Cisco IOS XR for Cisco ASR 9000 Series Aggregation Services Routers Interface Flap Vulnerability
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160412-asr
http://www.securitytracker.com/id/1035560
CopyrightCopyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.