Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed IKEv1 packets, aka Bug ID CSCtx66011.

Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed IKEv1 packets, aka Bug ID CSCtx66011.

Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed IKEv1 packets, aka Bug ID CSCtx66011. Cisco IOS is the interconnected network operating system used on most Cisco system routers and network switches. The vulnerability is that the affected software incorrectly processes the specially crafted IKE packet. The attacker can send a special IKEv1 packet to the device configured with IKEv1 through UDP port 500, 848 or 4500 to trigger the vulnerability. The successful exploitation of the vulnerability can prevent the Cisco IOS software from being released. Memory has been allocated, causing a memory leak. A sustained attack can be overloaded with the device, causing a denial of service attack. The following devices are affected by this vulnerability: Cisco Cisco IOS XE Software 3.4S .2, .3, .4 | 3.6S .0, BaseCiscoIOS 15.1M 15.1(4)M3, 15.1(4)M3a, 15.1(4)M4 | 15.1MR 15.1(3)MR | 15.1S 15.1(3)S2, 15.1(3)S3, 15.1(3)S4, 15.1(3)S5, 15.1(3)S5a | 15.1XB 15.1(4)XB7, 15.1(4) XB8a | 15.2GC 15.2(3)GC | 15.2GCA 15.2(3)GCA | 15.2S 15.2(2)S | 15.2T 15.2(3)T, 15.2(3)T1, 15.2(3)T2 | 15.2XA 15.2( 3) XA. Exploiting this issue may allow remote attackers to trigger denial-of-service conditions. This issue is being tracked by Cisco Bug ID CSCtx66011