VYPR
Get started
← All advisories
High severity7.5NVD Advisory· Published Jan 5, 2016· Updated May 6, 2026

CVE-2015-6432

CVE-2015-6432

Description

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements (PCEs) for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service (device reload) via a crafted update, aka Bug ID CSCuw83486.

Affected products

9
  • Cisco Systems, Inc./Ios Xr9 versions
    cpe:2.3:o:cisco:ios_xr:4.2.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:o:cisco:ios_xr:4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.2.4:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.3.0:*:*:*:*:*:*:*
    • cpe:2.3:o:cisco:ios_xr:5.3.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.