The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuq59131.
| Software | From | Fixed in |
|---|---|---|
| cisco / ios_xe | 3.11s.2 | 3.11s.2.x |
| cisco / ios_xe | 3.2s.0 | 3.2s.0.x |
| cisco / ios_xe | 3.1s.0 | 3.1s.0.x |
| cisco / ios_xe | 3.1s.2 | 3.1s.2.x |
| cisco / ios_xe | 3.13s.0 | 3.13s.0.x |
| cisco / ios_xe | 3.4s.1 | 3.4s.1.x |
| cisco / ios_xe | 3.10s.0a | 3.10s.0a.x |
| cisco / ios_xe | 3.3s.1 | 3.3s.1.x |
| cisco / ios_xe | 3.1s.3 | 3.1s.3.x |
| cisco / ios_xe | 3.4s.0 | 3.4s.0.x |
| cisco / ios_xe | 3.10s.0 | 3.10s.0.x |
| cisco / ios_xe | 3.6s_base | 3.6s_base.x |
| cisco / ios_xe | 3.12s.0 | 3.12s.0.x |
| cisco / ios_xe | 3.1s.5 | 3.1s.5.x |
| cisco / ios_xe | 3.2s.3 | 3.2s.3.x |
| cisco / ios_xe | 3.12s.1 | 3.12s.1.x |
| cisco / ios_xe | 3.4s.5 | 3.4s.5.x |
| cisco / ios_xe | 3.5s.2 | 3.5s.2.x |
| cisco / ios_xe | 3.10s.2 | 3.10s.2.x |
| cisco / ios_xe | 3.11s.0 | 3.11s.0.x |
| cisco / ios_xe | 3.4s.4 | 3.4s.4.x |
| cisco / ios_xe | 3.3s.0 | 3.3s.0.x |
| cisco / ios_xe | 3.10s.3 | 3.10s.3.x |
| cisco / ios_xe | 3.4s.2 | 3.4s.2.x |
| cisco / ios_xe | 3.11s.1 | 3.11s.1.x |
| cisco / ios_xe | 3.6s.2 | 3.6s.2.x |
| cisco / ios_xe | 3.2s.2 | 3.2s.2.x |
| cisco / ios_xe | 3.5s.0 | 3.5s.0.x |
| cisco / ios_xe | 3.6s.0 | 3.6s.0.x |
| cisco / ios_xe | 3.10s.1 | 3.10s.1.x |
| cisco / ios_xe | 3.4s.6 | 3.4s.6.x |
| cisco / ios_xe | 3.1s.1 | 3.1s.1.x |
| cisco / ios_xe | 3.6s.1 | 3.6s.1.x |
| cisco / ios_xe | 3.1s.6 | 3.1s.6.x |
| cisco / ios_xe | 3.5s_base | 3.5s_base.x |
| cisco / ios_xe | 3.4s.3 | 3.4s.3.x |
| cisco / ios_xe | 3.5s.1 | 3.5s.1.x |
| cisco / ios_xe | 3.1s.4 | 3.1s.4.x |
| cisco / ios_xe | 3.2s.1 | 3.2s.1.x |
| cisco / ios_xe | 3.3s.2 | 3.3s.2.x |