Vigil@nce - Cisco ASR 1000: denial of service via BDI Routing ICMP
May 2014 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An attacker can send a broadcast/multicast fragmented ICMP packet
to Cisco ASR 1000 with BDI Routing, in order to trigger a denial
of service.
Impacted products: Cisco ASR, IOS XE
Severity: 2/4
Creation date: 25/04/2014
DESCRIPTION OF THE VULNERABILITY
An attacker can send a broadcast/multicast fragmented ICMP packet
to Cisco ASR 1000 with BDI Routing, in order to trigger a denial
of service.
Technical details are unknown.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/Cisco-ASR-1000-denial-of-service-via-BDI-Routing-ICMP-14659