CVE-2015-0598 Cisco IOS Software Crafted RADIUS Packet Denial of Service Vulnerability (CVE-2015-0598)

A vulnerability in RADIUS functions of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause the Cisco IOS device to reload.
The vulnerability is due to incorrect processing of RADIUS Accept packets with crafted IPv6 attribute value pairs.

An attacker could exploit this vulnerability by intercepting the NAS to RADIUS communication or injecting the crafted packets from the RADIUS server. An exploit could allow the attacker to trigger a reload on the affected device.

Refer to Cisco advisory CVE-2015-0598 for updates and patch information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

CVE-2015-0598: CISCO IOS