CVE-2016-6385
N/A
Published: October 5, 2016 at 08:00 PM UTC
Updated: June 17, 2026 at 12:50 AM UTC
2 products affected across 1 vendorIOSIOS Xe
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
Memory leak in the Smart Install client implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.2 through 3.8 allows remote attackers to cause a denial of service (memory consumption) via crafted image-list parameters, aka Bug ID CSCuy82367.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
12.2(35)ex12.2(35)ex112.2(35)ex212.2(35)se12.2(35)se112.2(35)se212.2(35)se312.2(35)se412.2(35)se512.2(37)ex12.2(37)ey12.2(37)se12.2(37)se112.2(40)ex12.2(40)ex112.2(40)ex212.2(40)ex312.2(40)se12.2(40)se112.2(40)se212.2(44)ex12.2(44)ex112.2(44)ey12.2(44)se12.2(44)se112.2(44)se212.2(44)se312.2(44)se412.2(44)se512.2(44)se612.2(46)ex12.2(46)ey12.2(46)se12.2(46)se112.2(46)se212.2(50)se12.2(50)se112.2(50)se212.2(50)se312.2(50)se412.2(50)se512.2(52)ex12.2(52)ex112.2(52)se12.2(52)se112.2(53)ex12.2(53)ey12.2(53)ez12.2(53)se12.2(53)se112.2(53)se212.2(54)se12.2(55)ex12.2(55)ex112.2(55)ex212.2(55)ex312.2(55)ey12.2(55)ez12.2(55)se12.2(55)se112.2(55)se1012.2(55)se212.2(55)se312.2(55)se412.2(55)se512.2(55)se612.2(55)se712.2(55)se812.2(55)se912.2(58)ex12.2(58)ey12.2(58)ey112.2(58)ey212.2(58)ez12.2(58)se12.2(58)se112.2(58)se212.2(60)ez12.2(60)ez112.2(60)ez212.2(60)ez312.2(60)ez412.2(60)ez512.2(60)ez612.2(60)ez712.2(60)ez815.0(1)ex15.0(1)ey15.0(1)ey115.0(1)ey215.0(1)se15.0(1)se115.0(1)se215.0(1)se315.0(2)eb15.0(2)ec15.0(2)ed15.0(2)ed115.0(2)eh15.0(2)ej15.0(2)ej115.0(2)ek15.0(2)ek115.0(2)ex15.0(2)ex115.0(2)ex1015.0(2)ex215.0(2)ex315.0(2)ex415.0(2)ex515.0(2)ex815.0(2)ey15.0(2)ey115.0(2)ey215.0(2)ey315.0(2)ez15.0(2)se15.0(2)se115.0(2)se215.0(2)se315.0(2)se415.0(2)se515.0(2)se615.0(2)se715.0(2)se915.0(2a)ex515.0(2a)se915.1(2)sg15.1(2)sg115.1(2)sg215.1(2)sg315.1(2)sg415.1(2)sg515.1(2)sg615.1(2)sg715.2(1)e15.2(1)e115.2(1)e215.2(1)e315.2(1)ey15.2(2)e15.2(2)e115.2(2)e215.2(2)e415.2(2)eb15.2(2)eb115.2(2)eb215.2(2a)e115.2(3)e15.2(3)e115.2(3)e215.2(3)e315.2(3a)e15.2(3m)e215.2(3m)e315.2(4)e15.2(4)e115.2(4m)e1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
Vendor Advisoryx_refsource_CISCOMitigation
Source: [email protected]
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-smiVDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/93203x_refsource_MISCThird Party AdvisoryUS Government Resource
Source: [email protected]
https://ics-cert.us-cert.gov/advisories/ICSA-16-287-04Quick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card