CVE-2015-0631

R

ace condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688.

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:cisco:ips_sensor_software:7.2\(1\)e4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ips_sensor_software:7.2\(2\)e4:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:ids_4210:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ids_4215:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ids_4220:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ids_4230:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ids_4235:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ids_4250:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ids_4250_xl:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ips_4240:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ips_4255:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ips_4260:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ips_4270:*:*:*:*:*:*:*:*

History

21 Nov 2024, 02:23

Type Values Removed Values Added
References () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0631 - Vendor Advisory () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0631 - Vendor Advisory
References () http://www.securityfocus.com/bid/72700 - () http://www.securityfocus.com/bid/72700 -
References () http://www.securitytracker.com/id/1031780 - () http://www.securitytracker.com/id/1031780 -

Information

Published : 2015-02-21 11:59

Updated : 2025-04-12 10:46


NVD link : CVE-2015-0631

Mitre link : CVE-2015-0631

CVE.ORG link : CVE-2015-0631


JSON object : View

CWE
CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')