The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS 15.3(3)S0.1 on ASR devices mishandles internal tables, which allows remote attackers to cause a denial of service (memory consumption or device crash) via a flood of crafted ND messages, aka Bug ID CSCup28217.
| Software | From | Fixed in |
|---|---|---|
| cisco / ios | 15.2(5)st | 15.2(5)st.x |
| cisco / ios | 15.2(4)e | 15.2(4)e.x |
| cisco / ios | 15.2(4)st | 15.2(4)st.x |
| cisco / ios | 15.3(3)s0.1 | 15.3(3)s0.1.x |
| cisco / ios | 15.2(4)pi | 15.2(4)pi.x |