high7.5
CVE-2016-6385
Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a de…
Impact
Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service (memory consumption) via crafted image-list parameters, aka Bug ID CSCuy82367.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios | Versions 12.2\(35\)ex, 12.2\(35\)ex1, 12.2\(35\)ex2, 12.2\(35\)se, 12.2\(35\)se1, 12.2\(35\)se2 |
| Cisco | Ios Xe | Versions 3.2.0ja, 3.2.0se, 3.2.1se, 3.2.2se, 3.2.3se, 3.3.0se |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-smi
- http://www.securityfocus.com/bid/93203
- http://www.securitytracker.com/id/1036914
- https://ics-cert.us-cert.gov/advisories/ICSA-16-287-04
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-smi
- http://www.securityfocus.com/bid/93203
- http://www.securitytracker.com/id/1036914
- https://ics-cert.us-cert.gov/advisories/ICSA-16-287-04