CVE-2015-0681
Description
The TFTP server in Cisco IOS 12.2(44)SQ1, 12.2(33)XN1, 12.4(25e)JAM1, 12.4(25e)JAO5m, 12.4(23)JY, 15.0(2)ED1, 15.0(2)EY3, 15.1(3)SVF4a, and 15.2(2)JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO before 3.3.0XO; 3.2.xSQ; 3.3.xSQ; and 3.4.xSQ allows remote attackers to cause a denial of service (device hang or reload) via multiple requests that trigger improper memory management, aka Bug ID CSCts66733.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | 12.2\(33\)xn1, 12.2\(44\)sq1, 12.4\(23\)jy, 12.4\(25e\)jam1, 12.4\(25e\)jao5m, 15.0\(2\)ed1, 15.0\(2\)ey3, 15.1\(3\)svf4a, 15.2\(2\)jb1 | — |
| cisco ios_xe | 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 3.1s.0, 3.1s.1, 3.1s.2, 3.1s.3, 3.1s.4, 3.1s.5, 3.1s.6, 3.1sg.0, 3.1sg.1, 3.2s.0, 3.2s.1, 3.2s.2, 3.2s.3, 3.2se.0, 3.2se.1, 3.2se.2, 3.2se.3, 3.2sg.0, 3.2sg.1, 3.2sg.2, 3.2sg.3, 3.2sg.4, 3.2sg.5, 3.2sg.6, 3.2sg.7, 3.2sg.8, 3.2sg.9, 3.2xo.0, 3.2xo.1, 3.3sg.0, 3.3sg.1, 3.3sg.2, 3.3sq.0, 3.3sq.1, 3.4s.0, 3.4s.1, 3.4s.2, 3.4s.3, 3.4s.4, 3.4s.5, 3.4s.6, 3.4sq.0, 3.4sq.1, 3.5s.0, 3.5s.1, 3.5s.2, 3.5s_base | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.