CVE-2015-0695 : Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an

Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group virtual interface (BVI) traffic, which allows remote attackers to cause a denial of service (chip and card hangs and reloads) by triggering use of a BVI interface for IPv4 packets, aka Bug ID CSCur62957.

Published 2015-04-17 01:59:26

Updated 2017-01-06 15:29:26

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2015-0695

Cisco » Ios Xr » Version: 4.3.1
cpe:2.3:o:cisco:ios_xr:4.3.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 5.1.0
cpe:2.3:o:cisco:ios_xr:5.1.0:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 5.1.1
cpe:2.3:o:cisco:ios_xr:5.1.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 4.3.0
cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 4.3.2
cpe:2.3:o:cisco:ios_xr:4.3.2:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 5.2.1
cpe:2.3:o:cisco:ios_xr:5.2.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 5.2.0
cpe:2.3:o:cisco:ios_xr:5.2.0:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 5.1.2
cpe:2.3:o:cisco:ios_xr:5.1.2:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 4.3.3
cpe:2.3:o:cisco:ios_xr:4.3.3:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2015-0695

EPSS FAQ

1.31%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 78 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2015-0695

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

CWE ids for CVE-2015-0695

CWE-19

Assigned by: nvd@nist.gov (Primary)
CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2015-0695

http://www.securitytracker.com/id/1032139

Cisco IOS XR on ASR 9000 Routers BVI Interface Bugs Let Remote Users Deny Service - SecurityTracker
Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/74162

Cisco IOS XR Software CVE-2015-0695 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150415-iosxr

Cisco IOS XR Software BVI Routed Packet Denial of Service Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2015-0695

Products affected by CVE-2015-0695

Exploit prediction scoring system (EPSS) score for CVE-2015-0695

CVSS scores for CVE-2015-0695

CWE ids for CVE-2015-0695

References for CVE-2015-0695