CVE-2016-1376: Cisco IOS XR

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Cisco IOS XR 4.2.3, 4.3.0, 4.3.4, and 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (CRC and symbol errors, and interface flap) via crafted bit patterns in packets, aka Bug ID CSCuv78548.

Affected products

• Cisco IOS XR: version 4.2.3 only; version 4.3.0 only; version 4.3.4 only; version 5.3.1 only

Published 2016-04-12. Last modified 2026-06-17.