CVE-2016-9205

published 2016-12-14

CVE-2016-9205: A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C N I N A H

A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon (emsd) to crash, resulting in a denial of service (DoS) condition. More Information: CSCvb14425. Known Affected Releases: 6.1.1.BASE. Known Fixed Releases: 6.1.2.6i.MGBL 6.1.22.9i.MGBL 6.2.1.14i.MGBL.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	ios_xr	—	—
cisco	ios_xr	—	—

CWE-399