This script is Copyright (C) 2013-2014 Tenable Network Security, Inc.
The remote device is missing a vendor-supplied security patch.
A vulnerability in the implementation of the virtual fragmentation
reassembly (VFR) feature for IP version 6 (IPv6) in Cisco IOS Software
could allow an unauthenticated, remote attacker to cause an affected
device to hang or reload, resulting in a denial of service (DoS)
condition. The vulnerability is due to a race condition while
accessing the reassembly queue for IPv6 fragments. An attacker could
exploit this vulnerability by sending a crafted stream of valid IPv6
fragments. Repeated exploitation may result in a sustained DoS
condition. Cisco has released free software updates that address this
vulnerability. There are no workarounds for this vulnerability.
See also :
Apply the relevant patch referenced in Cisco Security Advisory
Risk factor :
High / CVSS Base Score : 7.8
CVSS Temporal Score : 6.8
Public Exploit Available : true