Cross Platform Release Notes for Cisco IOS Release 15.8(3)M

These release notes support Cisco IOS Release 15.8(3)M and describe new features and related documents.

Cisco IOS Release 15.8(3)M provides the latest innovations for the world’s most demanding networks and is designed to provide a unified network architecture that is stable, reliable, and secure. New features are fully integrated with extensive capabilities already available in Cisco IOS software to provide solutions for enterprise, service provider, and smart grid.

System Requirements

This section describes the system requirements for Cisco IOS Release 15.8(3)M and includes the following sections:

Supported Hardware Platforms

  • Cisco 800 series routers

  • Cisco 900 series routers

  • Cisco 1900 series integrated services routers

  • Cisco Analog Voice Gateways (VG202XM and VG204XM)

  • Cisco Connected Grid Router (CGR) 2000 series (CGR 2010)

  • Cisco Connected Grid Router (CGR) 1000 series (CGR1240,CGR1120)

  • Cisco High Density Analog Voice Gateways (VG350)

  • Cisco Industrial Integrated Services Routers IR8XX (809,829,807)

For more information about the platforms supported in Cisco IOS Release 15.8(3)M, see the “Platform-Specific Information” section on page 9 .

Determining Your Software Version

To determine the version of Cisco IOS software that is currently running on your Cisco network device, log in to the device and enter the show version user EXEC command:


Router> show version
Cisco Internetwork Operating System Software IOS (tm)
15.8 Software (c880data-universalk9-mz.), Version 15.8(3)M, RELEASE SOFTWARE
Upgrading to a new Release
MIBS
Field Notices and Software-Related Tools and Information
Troubleshooting

Upgrading to a New Release

For information about selecting a new Cisco IOS software release, see How to Choose a Cisco IOS Software Release at the following URL:

http://www.cisco.com/en/US/products/sw/iosswrel/ps1834/products_tech_note09186a00800fb9d9.shtml

For information about updating or upgrading Cisco IOS software, see How to Update/Upgrade Cisco IOS Software at the following URL:

http://www.cisco.com/en/US/prod/iosswrel/networking_solutions_products_genericcontent0900aecd806ea5be.html

Platform-specific documents may also provide information about upgrading to a new software release:

For instructions on ordering a Cisco IOS upgrade, see the document at the following location: http://www.cisco.com/warp/public/cc/pd/iosw/prodlit/957_pp.html.

To choose a new Cisco IOS software release by comparing feature support or memory requirements, use Cisco Feature Navigator. Cisco Feature Navigator is a web-based tool that enables you to determine which Cisco IOS software images support a specific set of features and which features are supported in a specific Cisco IOS image. You can search by feature or by feature set (software image). Under the release section, you can compare Cisco IOS software releases side by side to display both the features unique to each software release and the features that the releases have in common.

To choose a new Cisco IOS software release based on information about defects that affect that software, use Bug Toolkit at the following URL: http://www.cisco.com/cgi-bin/Support/Bugtool/launch_bugtool.pl.

MIBs

To locate and download MIBs for selected platforms, Cisco IOS releases, and feature sets, use Cisco MIB Locator found at the following URL:

http://tools.cisco.com/ITDIT/MIBS/servlet/index

If Cisco MIB Locator does not support the MIB information that you need, you can also obtain a list of supported MIBs and download MIBs from the Cisco MIBs page at the following URL:

http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml

To access Cisco MIB Locator, you must have an account on Cisco.com. If you have forgotten or lost your account information, send a blank e-mail to cco-locksmith@cisco.com. An automatic check will verify that your e-mail address is registered with Cisco.com. If the check is successful, account details with a new random password will be e-mailed to you. Qualified users can establish an account on Cisco.com by following the directions found at this URL:

http://tools.cisco.com/RPF/register/register.do

Field Notices and Software-Related Tools and Information

We recommend that you view the field notices for this release to see if your software or hardware platforms are affected. You can find Field Notices at http://www.cisco.com/en/US/support/tsd_products_field_notice_summary.html.

Visit the Download Software page on Cisco.com to subscribe to Cisco software notifications, locate MIBs, access the Software Advisor, and find other Cisco software-related information and tools. Access the Download Software page at http://www.cisco.com/cisco/software/navigator.html?a=a&i=rpm.

Troubleshooting

The following documents and websites provide assistance with troubleshooting your Cisco hardware and software:

  • Troubleshoot and Alerts Product or Technology Selection Page

http://www.cisco.com/cisco/web/psa/troubleshoot.html?mode=prod&level0=268437899

  • Cisco 800 Series Routers Troubleshooting Guides

http://www.cisco.com/en/US/products/hw/routers/ps380/prod_troubleshooting_guides_list.html

  • Cisco 1240 and 1120 Connected Grid Router Installation Guides

http://www.cisco.com/c/en/us/support/routers/1000-series-connected-grid-routers/products-installation-guides-list.html

  • Cisco 1600 Series Routers Hardware Troubleshooting Index Page

http://www.cisco.com/en/US/products/hw/routers/ps214/products_tech_note09186a008012fb88.shtml

  • Troubleshooting Cisco 3900 Series, 2900 Series, and 1900 Series ISRs

http://www.cisco.com/en/US/docs/routers/access/2900/hardware/installation/guide/Trouble.html

  • Cisco Unified Communications 500 Series Install and Upgrade Tech Notes

http://www.cisco.com/en/US/products/ps7293/tsd_products_support_install_and_upgrade_technotes_list.html

Cisco Error Message Decoder

http://www.cisco.com/pcgi-bin/Support/Errordecoder/index.cgi

  • Cisco Support Community

https://supportforums.cisco.com/index.jspa

Feature Support

Cisco IOS software is packaged in feature sets that consist of software images that support specific platforms. The feature sets available for a specific platform depend on which Cisco IOS software images are included in a release. Each feature set contains specific Cisco IOS features.


Caution

Cisco IOS images with strong encryption (including, but not limited to 168-bit [3DES] data encryption feature sets) are subject to U.S. government export controls and have limited distribution. Strong encryption images to be installed outside the United States are likely to require an export license. Customer orders may be denied or subject to delay because of U.S. government regulations. When applicable, the purchaser/user must obtain local import and use authorizations for all encryption strengths. Please contact your sales representative or distributor for more information, or send an e-mail to export@cisco.com.


Cisco Feature Navigator

Feature-to-image mapping is available through Cisco Feature Navigator. Cisco Feature Navigator is a web-based tool that enables you to determine which Cisco IOS software images support a specific set of features and which features are supported in a specific Cisco IOS image. You can search by feature or by feature set (software image). You can compare Cisco IOS software releases side-by-side to display both the features unique to each software release and the features that the releases have in common.

Cisco Feature Navigator is updated regularly when major Cisco IOS software releases and technology releases occur. For the most current information, go to the Cisco Feature Navigator home page at the following URL:

www.cisco.com/go/cfn

For help with Cisco Feature Navigator, see the help information at the following URL:

http://www.cisco.com/web/applicat/CFNTOOLS/Help_Docs/help/cfn_support.html

Determining the Software Images (Feature Sets) That Support a Specific Feature

To determine which software images (feature sets) in a Cisco IOS release support a specific feature, go to the Cisco Feature Navigator home page and perform the following steps.

SUMMARY STEPS

  1. From the Cisco Feature Navigator home page, click Research Features.
  2. Select your software type or leave the field as “All”.
  3. To find a feature, you can search by either Feature or Technology (select the appropriate button). If you select Search by Feature, you can further filter your search by using the Filter By text box.
  4. Choose a feature from the Available Features text box, and click the Add button to add the feature to the Selected Features text box.
  5. Click Continue when you are finished choosing features.
  6. In the Release/Platform Tree area, select either your release (from the Train-Release list) or your platform (from the Platform list).
  7. The “Search Result” table will list all the software images (feature sets) that support the features that you chose.

DETAILED STEPS


Step 1

From the Cisco Feature Navigator home page, click Research Features.

Step 2

Select your software type or leave the field as “All”.

Step 3

To find a feature, you can search by either Feature or Technology (select the appropriate button). If you select Search by Feature, you can further filter your search by using the Filter By text box.

Step 4

Choose a feature from the Available Features text box, and click the Add button to add the feature to the Selected Features text box.

Note 
To learn more about a feature in the list, click the View Desc button in the Available Features text box.

Repeat this step to add features. A maximum of 20 features can be chosen for a single search.

Step 5

Click Continue when you are finished choosing features.

Step 6

In the Release/Platform Tree area, select either your release (from the Train-Release list) or your platform (from the Platform list).

Step 7

The “Search Result” table will list all the software images (feature sets) that support the features that you chose.

Note 
You can download your results into an Excel spreadsheet by clicking on the Download Excel button.

Determining the Features Supported in a Specific Software Image (Feature Set)

To determine which features are supported in a specific software image (feature set), go to the Cisco Feature Navigator home page and perform the following steps.

SUMMARY STEPS

  1. From the Cisco Feature Navigator home page, click Research Software.
  2. Select your software type from the drop-down list and chose the Release button in the “Search By” area.
  3. From the Major Release drop-down list, chose the appropriate major release.
  4. From the Release drop-down list, choose the appropriate maintenance release.
  5. From the Platform drop-down list, choose the appropriate hardware platform.
  6. From the Feature Set drop-down list, choose the appropriate feature set. The Image Details area will provide details on the specific image. The Available Features area will list all the features that are supported by the feature set (software image) that you chose.

DETAILED STEPS


Step 1

From the Cisco Feature Navigator home page, click Research Software.

Step 2

Select your software type from the drop-down list and chose the Release button in the “Search By” area.

Step 3

From the Major Release drop-down list, chose the appropriate major release.

Step 4

From the Release drop-down list, choose the appropriate maintenance release.

Step 5

From the Platform drop-down list, choose the appropriate hardware platform.

Step 6

From the Feature Set drop-down list, choose the appropriate feature set. The Image Details area will provide details on the specific image. The Available Features area will list all the features that are supported by the feature set (software image) that you chose.

Note 
To learn more about a feature in the list, click the View Desc button in the Available Features text box.

Memory Recommendations

To determine memory recommendations for software images (feature sets) in your Cisco IOS release, go to the Cisco Feature Navigator home page and perform the following steps.

SUMMARY STEPS

  1. From the Cisco Feature Navigator home page, click Research Software.
  2. Select your software type from the drop-down list and choose the Release button in the “Search By” area.
  3. From the Major Release drop-down list, choose the appropriate major release.
  4. From the Release drop-down list, choose the appropriate maintenance release.
  5. From the Platform drop-down list, choose the appropriate hardware platform.
  6. From the Feature Set drop-down list, choose the appropriate feature set.
  7. The Image Details area will provide details on the specific image including the DRAM and flash memory recommendations for each image. The Available Features area will list all the features that are supported by the feature set (software image) that you chose.

DETAILED STEPS


Step 1

From the Cisco Feature Navigator home page, click Research Software.

Step 2

Select your software type from the drop-down list and choose the Release button in the “Search By” area.

Step 3

From the Major Release drop-down list, choose the appropriate major release.

Step 4

From the Release drop-down list, choose the appropriate maintenance release.

Step 5

From the Platform drop-down list, choose the appropriate hardware platform.

Step 6

From the Feature Set drop-down list, choose the appropriate feature set.

Step 7

The Image Details area will provide details on the specific image including the DRAM and flash memory recommendations for each image. The Available Features area will list all the features that are supported by the feature set (software image) that you chose.


Features and Important Notes

These release notes describe the following topics:

Important Notes

  • The H.323 functionality is not supported from Cisco IOS 15.7(3)M onwards. This might potentially have an impact on the NAT H.323 ALG functionality. Note that Cisco technical support will not be available for any NAT H.323 ALG issues related to this change. If you are impacted by this change, we recommend that you consider Session Initiation Protocol (SIP) as an alternative solution.

New and Changed Information

This section lists the new hardware and software features supported by Cisco IOS Release 15.3(3)M and contains the following subsections:

New Software Features Supported in Cisco IOS Release 15.8(3)M

Cisco IR800 Industrial Integrated Services Routers and Cisco 1000 Series Connected Grid Routers Features

For detailed information, see the following Cisco document:

Cisco IOS Release 15.8(3)M - Release Notes for Cisco IR800 Industrial Integrated Services Routers and Cisco 1000 Series Connected Grid Routers

Cisco 900 Integrated Services Routers

For detailed information, see the following document:

https://www.cisco.com/c/en/us/td/docs/routers/access/900/software/configuration/guide/900SCG.html

Bugs for Cisco IOS Release 15.8(3)M

Open and Resolved Bugs

The open and resolved bugs for this release are accessible through the Cisco Bug Search Tool. This web-based tool provides you with access to the Cisco bug tracking system, which maintains information about bugs and vulnerabilities in this product and other Cisco hardware and software products.

Within the Cisco Bug Search Tool, each bug is given a unique identifier (ID) with a pattern of CSCxxNNNNN, where x is any letter (a-z) and N is any number (0-9). The bug IDs are frequently referenced in Cisco documentation, such as Security Advisories, Field Notices and other Cisco support documents. Technical Assistance Center (TAC) engineers or other Cisco staff can also provide you with the ID for a specific bug.

You can save searches that you perform frequently. You can also bookmark the URL for a search and email the URL for those search results.


Note

If the defect that you have requested cannot be displayed, this may be due to one or more of the following reasons: the defect number does not exist, the defect does not have a customer-visible description yet, or the defect has been marked Cisco Confidential.

Using the Bug Search Tool

The Cisco Bug Search Tool enables you to filter the bugs so that you only see those in which you are interested. In addition to being able to search for a specific bug ID, or for all bugs in a product and release, you can filter the open and/or resolved bugs by one or more of the following criteria:

  • Last modified date
  • Status, such as fixed (resolved) or open
  • Severity
  • Support cases

For more information about how to use the Cisco Bug Search Tool, including how to set email alerts for bugs and to save bugs and searches, see Bug Search Tool Help & FAQ.


Note

You must have a Cisco.com account to log in and access the Cisco Bug Search Tool. if you do not have one, you can register for an account.

To use the Cisco Bug Search Tool:

  1. In your browser, navigate to the Cisco Bug Search Tool.
  2. If you are redirected to a Log In page, enter your registered Cisco.com username and password and then, click Log In.
  3. To search for a specific bug, enter the bug ID in the Search For field and press Enter.
  4. To search for bugs related to a specific software release, do the following:
    1. In the Product field, choose Series/Model from the drop-down list and then enter the product name in the text field. If you begin to type the product name, the Cisco Bug Search Tool provides you with a drop-down list of the top ten matches. If you do not see this product listed, continue typing to narrow the search results.
    2. In the Releases field, enter the release for which you want to see bugs.

The Cisco Bug Search Tool displays a preview of the results of your search below your search criteria. You can mouse over bugs to see more content about a specific bug.

To see more content about a specific bug, you can do the following:

  • Mouse over a bug in the preview to display a pop-up with more information about that bug.

  • Click on the hyperlinked bug headline to open a page with the detailed bug information.

  • To restrict the results of a search, choose from one or more of the following filters:

    Filter

    Description

    Modified Date

    A predefined date range, such as last week or last six months.

    Status

    A specific type of bug, such as open or fixed.

    Severity

    The bug severity level as defined by Cisco. For definitions of the bug severity levels, see Bug Search Tool Help & FAQ

    Rating

    The rating assigned to the bug by users of the Cisco Bug Search Tool.

    Support Cases

    Whether a support case has been opened or not.

Your search results update when you choose a filter.

Resolved Bugs—Cisco IOS Release 15.8(3)M9

Table 1. Resolved Bugs—Cisco IOS Release 15.8(3)M9

Caveat ID Number

Description

CSCwb62452

Low flash error when CGR has plenty of space.

CSCwb33442

Dialer callback cannot trigger on C891.

CSCwb25340

SNMP OID for SINR giving wrong (static) value of zero.

CSCvw60355

DHCPv6: Memory allocation of DHCPv6 relay option results in crash.

CSCwc20006

Backoff algorithm not working as expected with dual stack for reject code 33.

Open Bugs—Cisco IOS Release 15.8(3)M9

There are no new or open bugs for this release.

Resolved Bugs—Cisco IOS Release 15.8(3)M8

Table 2. Resolved Bugs—Cisco IOS Release 15.8(3)M8

Caveat ID Number

Description

CSCvh83319

Interop vrrp does not work between cedge and vedge

CSCvz12150

Flow Record shows not configured even defined flow monitor

CSCvh43691

Crash at glbp address comparison

CSCvz84217

HSRP standby switch unable to reach the VIP

CSCvy87472

Restart because of bus error

CSCwa89746

Configure replace crashes device with "Unexpected exception to CPU"

CSCwa52960

Disabling dot1x command “authentication port-control force-auth” there is no MAC learned

CSCvz84269

Incorrect temp from MCU causing false over temp alerts

CSCwb33442

Dialer callback cannot trigger on C891

CSCwa22863

'Storm-control shutdown' unexpectedly configured on the interface after "clear counters"

CSCwa06827

After clearing interface counters, 'hdsl2ShdslEndpointCurrActivationState' returns always 0

CSCvy98864

Crash due to DNS server

Open Bugs—Cisco IOS Release 15.8(3)M8

Table 3. Open Bugs—Cisco IOS Release 15.8(3)M8

Caveat ID Number

Description

CSCwb22269

VDS is not coming up after DNAC upgrade

Resolved Bugs—Cisco IOS Release 15.8(3)M7

Table 4. Resolved Bugs—Cisco IOS Release 15.8(3)M7

Caveat ID Number

Description

CSCvr04223

RootCA intermittently does not grant SubCA renewal request even with grant auto roll ca-cert

CSCvw81805

WPAN interface missing

CSCvw82556

Router hangs and reload with reload reason: error - FPGA IOS watchdog timer expired

CSCvw97528

DNS info received via Cellular link in VRF goes into default DNS view instead VRF Specific DNS view

CSCvx85117

Communication by SVI does not recover even after the loop is resolved.

CSCvx89735

CISCO1921-SEC/K9 || Router crashing frequently

CSCvy44382

CGR 1xxx ciscoEnvMonSupplyState SNMP object returns Warning when DC supply is less than 12 volts.

CSCvy91068

Port status looped as listening - learning - blocking with enabled STP on C921J router

Open Bugs—Cisco IOS Release 15.8(3)M7

Table 5. Open Bugs—Cisco IOS Release 15.8(3)M7

Caveat ID Number

Description

CSCsk85992

ENH:IOS CSR (Certificate signing request) should include subjectAltName

CSCti88451

Syslog message for SIP Trunk unregistration/registration

CSCug48022

Remove NTP Core (INFO):946D 8D popcorn popcorn from ntp logging

CSCvr48414

Unable to remove isakmp match statement if vrf is removed first

CSCvs96075

snmp-walk output is produced when PTP is in Forward mode

CSCvw16468

CUBE media issue with signaling forking for disable-early-media 180

CSCvz12150

Flow Record shows not configured even defined flow monitor

Resolved Bugs—Cisco IOS Release 15.8(3)M6

Table 6. Resolved Bugs—Cisco IOS Release 15.8(3)M6

Caveat ID Number

Description

CSCuv97577

Mishandling of dsmpSession pointer causes a crash

CSCvm59977

DTMF renegotiation from RFC2833 to OOB does not work

CSCvn71487

CUBE fails to send outgoing SUBSCRIBE if egress dial-peer has "session server-group" configured

CSCvn76365

VoIP Dial-peer up/down traps sent to SNMP server every interval

CSCvo15003

CUBE - SDP version increment behaviour creates cypto interworking issues

CSCvq11134

SDP version was incremented due to misplace of PT 100

CSCvq43731

IR-829 h-QOS NULL pointer deference causing a crash

CSCvq57205

Recording failures with XMF media forking and SIP preservation timer

CSCvs52160

MWI does not work for all shared lines

CSCvs67791

491 returned on midcall INVITE when peer leg is not pending a request

CSCvt21259

IPV4 Multicast packets are unexpectedly replicated to underlay interface of mGRE tunnels

CSCvt53256

C3900e: crash after enabling voip translation debugs

CSCvu19869

"Error in encoded data" is shown by ip nat command

CSCvu20470

Memory leak in STUN/MallocLite on ISRG2 CUBE/SIP GW routers leading to memory exhaustion over time.

CSCvu49754

Deleting a Voice Port on CUCM Shuts Down Additional Voice Ports on MGCP Gateway

CSCvu54635

SRTP key not updated to DSP on re-INVITE

CSCvu59071

I/O Memory Leak With Tunnel Config

CSCvu73840

Unexpected reboot observed while trying to relay the digit to opposite leg

CSCvv08356

AP 860VAE-W GUI doesn't reflect changes in WLAN Configuration.

CSCvv14026

Unexpected Reload after running 'show voice dsp' command while an ISDN Call Disconnects

CSCvv14078

Unexpected reload during a SIP call

CSCvv41229

RTP port leak

CSCvv48060

CUBE accepts SDP with invalid port number

CSCvv57896

Empty VoiceXML Property Value breaks Audio even when validating syntax success.

CSCvw15842

HSRP group id 11 can't create virtual MAC

CSCvw46822

ISR Gen-2 fails to reset ROC on receiving new SDP parameters in SRTP hold/resume after 15 minutes

Open Bugs—Cisco IOS Release 15.8(3)M6

Table 7. Open Bugs—Cisco IOS Release 15.8(3)M6

Caveat ID Number

Description

CSCug48022

Remove NTP Core (INFO):946D 8D popcorn popcorn from ntp logging

CSCun77919

IP host Port lookup is failed in case of Reverse SSH

CSCvr48414

Unable to remove isakmp match statement if vrf is removed first

CSCvs86573

Connect message is never forwarded to the calling side

CSCvv39512

RIP stops working after issuing no network 0.0.0.0 command

CSCvw16468

CUBE media issue with signaling forking for disable-early-media 180

CSCvw32890

NAT stopped working with multicast

Resolved Bugs—Cisco IOS Release 15.8(3)M5

Table 8. Resolved Bugs—Cisco IOS Release 15.8(3)M5

Caveat ID Number

Description

CSCvd14310

IP TUNNELS: Overlapping Loopback Interface Causes Incorrect Forwarding Decision with AppNav and PfR

CSCvj43156

Crash in XDR process: "fib_rp_table_broker_encode_buf.size <= FIB_RP_TABLE_BROKER_ENC_BUF_SZ"

CSCvg19259

MPLSoFlexVPN: Hub doesn't forward resolution req when default route is advertised to spokes

CSCvh24730

PfRv3: Crash while Printing the Same TCA Message

CSCvh92659

BFD flaps everytime with dynamic tunnel creation in DMVPN

CSCvn78113

Tunnel PMTUD not being aged out after PMTUD ager timer expires

CSCvo27961

%IR800_SPI_FLASH-3-VERIFY_ERROR: SPI Flash verification error at block 0x900000

CSCvo47866

Crash at Process = SCCP Auto Config

CSCvp69393

Router crashes after snmpget to OID related to NHRP

CSCvp88044

Performance Monitor crash

CSCvr27393

Crash on "BGP Router" process

CSCvt02534

ISR4K Unexpectedly Reboots with CENT-BR-0

CSCvt25863

After firmware upgrade to version 15.9(3)M1, AP is not booting

CSCvt49036

C800 with multiple 'main' regions do not successfully write all cores via 'exception core-file'

CSCvu39805

C841-WIM-1T DTE does not raise RTS signal

CSCul97065

5900 Series: Running config get cleared with random power cycles

CSCvc84848

IBGP paths getting marked as RPKI Valid

CSCvd43539

NTP crash with empty peer list

CSCvo42105

IOS-XE DHCP server creates option 125 with invalid format

CSCvq74033

Packet drop in vdsl controller pppoe stuck in PADISNT

CSCvr61586

Cat4K sends RA with incorrect packet format

CSCvr97977

EIGRP hello packets sourced from the tunnel ip address even the EIGRP is not enabled on interface

CSCvr99969

IOS ISR Router crashes with "show crypto pki cert verb"

CSCvs08413

Reload when applying event manager policy to the router.

CSCvs29412

x509 SSH authentication incorrect UPN value selected

CSCvs40081

CUBE is not able to transfer the call

CSCvs46847

RTP/SRTP interworking fails when 180 and 183 have different to-tag

CSCvs99705

PKI CLI - no warning that rsakeypair name starting from 0 (zero) is not working for cert regenerate

CSCvt09605

CLI parser unexpectedly interprets backslash with octal numbers

CSCvt46401

CUBE does not accept channel ID for MRCPv2

CSCvt62123

[C891F/15.9(3)M1] DMVPN after removing IPSec, packet drops continues at tunnel int

CSCvt91284

Rpl route-poisoning not working in startup-config

CSCvu13983

C927/C926 "show controller vdsl 0" hangs when MAC address is confogured on Eth 0 interface

CSCvu19733

Evaluation of CVE-2020-11868 for IOS

Open Bugs—Cisco IOS Release 15.8(3)M5

Table 9. Open Bugs—Cisco IOS Release 15.8(3)M5

Caveat ID Number

Description

CSCuv

Cisco IOS allows RC4-MD5 and RC4-SHA1 SSL ciphers to be negotiated by default

CSCvv10404

After upgade to 15.9-3M1, GOS is using secondary IP on svcbr_0 for NAT

CSCvv40724

Unexpected Reload while processing calls using H323

CSCvs06889

IOS router crashes with Crypto PAK's unavailable error from crypto engine.

CSCvu83051

WCCP ACL programming issue - denied traffic is redirected

CSCvv33599

VXML voice gateway crash due to block overrun

CSCvv34333

NTP is unable to synchronise even when NTP messages are exchanged

Resolved Bugs—Cisco IOS Release 15.8(3)M4

Table 10. Resolved Bugs—Cisco IOS Release 15.8(3)M4

Caveat ID Number

Description

CSCvn55798

C897VAW-E-K9 // 15.7(3)M1 // Unable to disable lldp

CSCvn63087

Observing Memory leak at Sip MPA

CSCvp22063

IR829 4G: Inserting antenna/SIM in SLOT1 disables IP connectivity on a working intf Cell 0/0

CSCvp91256

BGP labels not propagated

CSCvq22176

IR807G-LTE-GA-K9 is not recognized as Cisco genuine product

CSCvq23676

CGR1000 - FE LEDs and SVI incorrect behavior

CSCvq45550

SIP Profiles not properly modifying 400 responses

CSCvq66030

Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability

CSCvq70840

LTE failover timer resets to 5 min after reload

CSCvq75610

freed rpi_parent is hit when deleting parent route by route update event

CSCvq79177

Router reload due to command "show control-plane host open-ports"

CSCvq92102

VG450: SCCP crashing router while shutdown the process

CSCvr23353

Unregistered supplicant can ping every re-authentication timer with mab when Spanning is disabled

CSCvr27262

DHCP CLIENT not working when CWMP agent is enabled

CSCvr27854

CGR1000 has SNMP queue length on 1 by default since 15.8(3)M2

CSCvr36117

router crash and reload due to freeblock magic number corruption

CSCvr47100

Subinterface reporting more traffic than physical interface

CSCvr53712

c927 c926 c921 usb flash drive/memory Stick problem

CSCvr60790

Device Becomes Unresponsive when Running "crypto key generate rsa"

CSCvr62163

IOS Firewall crash with video call

CSCvr70878

SNMP cannot poll LLDP neighbors from the device

CSCvr81357

ISR c800 is not giving DHCP address when port authentication failover from MAB to guest-vlan

CSCvr82520

Cisco Wave 1 AP Software reloads unexpectedly when configuring a long SNMP-server community string

CSCvr82645

PoE stops working after upgrade on C881K9

CSCvr92028

C921J-4P: Layer3 port(Gi4 and Gi5) linkup failure when peer is in fixed mode(speed or duplexity)

CSCvr95825

Trackbacks observed when querying DNS to ipv6 link local address.

CSCvr96849

System power-off after removing CLI for ignition undervoltage threshold

CSCvs01516

IR829: "lte event rssi onset mib-trap" is not recognized

CSCvs06707

(CRM: 00942794) IR829: link-recovery does not work after "test cellular 0 modem-reset"

CSCvs17683

IPSEC stateful redundancy - show crypto ipsec sa shows PFS (Y/N): N, while active shows PFS (Y/N): Y

CSCvs31248

MRCP/ASR completetimeout voicexml properties in form element is not being sent in RECOGNIZE

CSCvs47682

Router crashed on removing trustpoint on dspfarm profile

CSCvs50445

Ping Fails after SW-port is configured on interfaced

Open Bugs—Cisco IOS Release 15.8(3)M4

Table 11. Open Bugs—Cisco IOS Release 15.8(3)M4

Caveat ID Number

Description

CSCvm59977

DTMF renegotiation from RFC2833 to OOB does not work

CSCvn71487

CUBE fails to send outgoing SUBSCRIBE if egress dial-peer has "session server-group" configured

CSCvo15003

CUBE - SDP version increment behaviour creates cypto interworking issues

CSCvq11134

SDP version was incremented due to misplace of PT 100

CSCvq62065

SIP phone paging party hears own voice

CSCvq74033

Packet drop in vdsl controller pppoe stuck in PADISNT

CSCvq83601

SNMP OID giving inaccurate/no updates for Cellular and interface OIDs

CSCvs16361

Block Overrun after NHRP-3-PAKERROR syslog message

CSCvs52160

MWI does not work for all shared lines

CSCvs67791

491 returned on midcall INVITE when peer leg is not pending a request

CSCvs86573

Connect message is never forwarded to the calling side

Resolved Bugs—Cisco IOS Release 15.8(3)M4

Table 12. Resolved Bugs—Cisco IOS Release 15.8(3)M4

Caveat ID Number

Description

CSCvn55798

C897VAW-E-K9 // 15.7(3)M1 // Unable to disable lldp

CSCvn63087

Observing Memory leak at Sip MPA

CSCvp22063

IR829 4G: Inserting antenna/SIM in SLOT1 disables IP connectivity on a working intf Cell 0/0

CSCvp91256

BGP labels not propagated

CSCvq22176

IR807G-LTE-GA-K9 is not recognized as Cisco genuine product

CSCvq23676

CGR1000 - FE LEDs and SVI incorrect behavior

CSCvq45550

SIP Profiles not properly modifying 400 responses

CSCvq66030

Cisco IOS and Cisco IOS XE Software Web UI Cross-Site Request Forgery Vulnerability

CSCvq70840

LTE failover timer resets to 5 min after reload

CSCvq75610

freed rpi_parent is hit when deleting parent route by route update event

CSCvq79177

Router reload due to command "show control-plane host open-ports"

CSCvq92102

VG450: SCCP crashing router while shutdown the process

CSCvr23353

Unregistered supplicant can ping every re-authentication timer with mab when Spanning is disabled

CSCvr27262

DHCP CLIENT not working when CWMP agent is enabled

CSCvr27854

CGR1000 has SNMP queue length on 1 by default since 15.8(3)M2

CSCvr36117

router crash and reload due to freeblock magic number corruption

CSCvr47100

Subinterface reporting more traffic than physical interface

CSCvr53712

c927 c926 c921 usb flash drive/memory Stick problem

CSCvr60790

Device Becomes Unresponsive when Running "crypto key generate rsa"

CSCvr62163

IOS Firewall crash with video call

CSCvr70878

SNMP cannot poll LLDP neighbors from the device

CSCvr81357

ISR c800 is not giving DHCP address when port authentication failover from MAB to guest-vlan

CSCvr82520

Cisco Wave 1 AP Software reloads unexpectedly when configuring a long SNMP-server community string

CSCvr82645

PoE stops working after upgrade on C881K9

CSCvr92028

C921J-4P: Layer3 port(Gi4 and Gi5) linkup failure when peer is in fixed mode(speed or duplexity)

CSCvr95825

Trackbacks observed when querying DNS to ipv6 link local address.

CSCvr96849

System power-off after removing CLI for ignition undervoltage threshold

CSCvs01516

IR829: "lte event rssi onset mib-trap" is not recognized

CSCvs06707

(CRM: 00942794) IR829: link-recovery does not work after "test cellular 0 modem-reset"

CSCvs17683

IPSEC stateful redundancy - show crypto ipsec sa shows PFS (Y/N): N, while active shows PFS (Y/N): Y

CSCvs31248

MRCP/ASR completetimeout voicexml properties in form element is not being sent in RECOGNIZE

CSCvs47682

Router crashed on removing trustpoint on dspfarm profile

CSCvs50445

Ping Fails after SW-port is configured on interfaced

Resolved Bugs—Cisco IOS Release 15.8(3)M3b

Table 13. Resolved Bugs—Cisco IOS Release 15.8(3)M3b

Caveat ID Number

Description

CSCvr27262

DHCP CLIENT not working when CWMP agent is enabled

CSCvr53712

c927 c926 c921 usb flash drive/memory Stick problem

Open Bugs—Cisco IOS Release 15.8(3)M3b

Table 14. Open Bugs—Cisco IOS Release 15.8(3)M3b

Caveat ID Number

Description

CSCvs26493

HCD_TRANS :VERBOSE error seen with USB OIR

Resolved Bugs—Cisco IOS Release 15.8(3)M3

Table 15. Resolved Bugs—Cisco IOS Release 15.8(3)M3

Caveat ID Number

Description

CSCve77011

SSL handshake failure when validating certification with name-constraints

CSCvi48253

Y2.02K: self-signed cert expires after 31 Dec 2019, cannot be created after 1 Jan 2020

CSCvj28921

High CPU due to Alignment Corrections - SMEF & IWAN

CSCvk17998

Rekey Timer are same for both the Server and Client

CSCvm40582

Crash when entering username with aaa common-criteria policy password

CSCvn11434

IPSEC NAT-T / transport mode: UDP checksum not updated on decryption

CSCvn18500

Certificate map does not work always with UPN in SAN field

CSCvn66220

Layer 2 Neighbors Have No Connectivity Despite Authentication Open Being Configured

CSCvo03458

PKI "revocation check crl none" does not fallback if CRL not reachable

CSCvo10491

PnP Agent should detect image upgrade scenario and configure dialer to bring up cellular interface

CSCvo12745

Packet drop occurs after acl permit configurations

CSCvo12799

Call is not getting connected in Forking Re-INVITE scenario

CSCvo19623

9200L Day0 setup not working out of box.

CSCvo27553

PKI incorrect fingerprint calulation during CA authentication

CSCvo37464

CUBE picks incorrect interface for media after receiving c=IN IP4 0.0.0.0

CSCvo39963

Analog phones on VG310 play continious BEEP tone approx every 60 secs.

CSCvo60302

Deleting one sip-copylist will remove all sip copy-lists from dialpeers

CSCvo66216

IPSec-Session count in "show crypto eli" reaches max causing VPN failure

CSCvo70400

Reverse SSH bringing down RTS on serial interface

CSCvo72426

Flexible NetFlow Template ID is not getting exported

CSCvo82837

Transcoder getting invoked for SRTP-SRTP calls.

CSCvo94468

%PERF_MON_ASYNC-3-MEM: Memory cleanup failed - ssrc db cache results in PMI not created on BR

CSCvp00182

Bytes output in show policy-map is incorrect on dialer interface

CSCvp05070

Overlay BGP down when configured "ip nhrp server-only"

CSCvp08738

Router loses "transport tcp tls v1.0" on reload

CSCvp13270

"mac-address-table secure sticky <mac-add>" lost when configure "mac-address-table secure maximum"

CSCvp26876

PNP profile using hostname is not working anymore

CSCvp27220

Tail drops on IPSLA sender when using scaled udp-jitter probes

CSCvp29316

ISR8xx TCAM limitation

CSCvp33421

Shut down interface Wlan-GigabitEthernet0

CSCvp38876

ESR crashed with Segmentation fault on Process Rate limit load process

CSCvp46185

Source Filter and Voice RTP Source-Filter in IOS Routers should allow RTP when on Hold

CSCvp47792

VG3x0 - groundstart voice-port configuration removed after reload

CSCvp60608

Reload when importing certificate from nvram:

CSCvp81102

IPsec SA installation fails with simultaneous negotiations despite fix for CSCve08418

CSCvp81193

After receiving 491, cube is not setting the media transcoder flag at SRTP leg

CSCvp90380

C5915 - NVRAM corrupts during bootup

CSCvp92334

Crash after Media monitor look up.

CSCvq00362

ISRG2: SRTP information not passed in Outgoing 183SP's SDP in external call forward scenario

CSCvq00550

Split DNS not working in case of TCP query coming on WAN interface and destined to LAN interface

CSCvq03717

ISDN memory leak

CSCvq04830

C921 forward packets with a destination MAC address that is not the MAC Address of SVI

CSCvq09955

[C900] traffic cannot be forwarded once storm-control changed from blocking to forwarding

CSCvq55604

C841M (15.8(3)M2) stuck at Splash Screen when access GUI (3.5.3) via Google Chrome & Firefox.

CSCvq57345

When the traffic rate is increased , VDSL interface starts bouncing

CSCvq59529

C926 and C927 will have VDSL down when mac address on Ethernet interface is changed

Open Bugs—Cisco IOS Release 15.8(3)M3

Table 16. Open Bugs—Cisco IOS Release 15.8(3)M3

Caveat ID Number

Description

CSCuh84343

IOS/XE NTP synchronized but clock drifts

CSCux95215

Evaluation of sce for NTP_January_2016

CSCuy07466

Evaluation of sce for OpenSSL January 2016

CSCuy54627

Evaluation of sce for OpenSSL March 2016

CSCuz52530

Evaluation of sce for OpenSSL May 2016

CSCvc23570

Evaluation of sce for NTP November 2016

CSCvj59153

Evaluation of all for May CPU Side-Channel Information Disclosure Vulnerabilities

CSCvj83284

3650 mab failover does not work after first failed dot1x authentication

CSCvk60643

Memory leak observed in AFW_Redirect_New with call transfer recall FIT1 script

CSCvm59977

DTMF renegotiation from RFC2833 to OOB does not work

CSCvm94891

Crash caused by a "TLB Modification exception" after processing a null chunk in "IP Input" process.

CSCvn02037

"show isis rib <A.B.C.D> <A.B.C.D>" command returns % Ambiguous command: error

CSCvn71487

CUBE fails to send outgoing SUBSCRIBE if egress dial-peer has "session server-group" configured

CSCvn82489

CUBE changing the payload for content sharing packets, though it negotiate correctly

CSCvo13166

RPHY: RPD reports 66070209 L2TPv3 Connection Error unexpectedly

CSCvo15003

CUBE - SDP version increment behaviour creates cypto interworking issues

CSCvo61691

Disable MOP by default

CSCvp84175

Dialog Manager(url_parse_generic) leak observed in call transfer recall FIT2 script

CSCvq05185

ISDN calls being picked in round robin manner instead of all happening at the same time

CSCvq11134

SDP version was incremented due to misplace of PT 100

CSCvq18307

VRF routes disappeared after reload

CSCvq31845

"ivr: hdata" leaks in b-acd callq scenario when audio files are not present in configured path

CSCvq45550

SIP Profiles not properly modifying 400 responses

CSCvq47016

Exporter Thread crash after low stack report

CSCvq62065

SIP phone paging party hears own voice

CSCvq72987

T-Train: Hung calls found on standby router

CSCvq74033

Packet drop in vdsl controller pppoe stuck in PADISNT

CSCvq83601

SNMP OID giving inaccurate/no updates for Cellular and interface OIDs

CSCvq92380

ezvpn client config dissapears from gig0 interface when interface flaps

Resolved Bugs—Cisco IOS Release 15.8(3)M2

Table 17. Resolved Bugs—Cisco IOS Release 15.8(3)M2

Caveat ID Number

Description

CSCuu71473

Rework for CSCun57148 - High CPU in FNF Cache Ager P

CSCva00765

crash after no ipv4 multicast multitopology command

CSCvc39563

High CPU Due to "Async write proc" During Hung Filesystem Operation

CSCvd61016

Polaris_dev 16.6: IOSd crash @act2_token_engine_message_proc with flexvpn profile

CSCve47826

Memory leak Crypto IKEv2 at ikev2_ios_psh_set_route_info

CSCvg72396

Traceback seen at sdp_verify_sdp_ptr

CSCvi15950

DTMF fails when mid-call renegotiation changes DTMF method

CSCvi26188

Watchdog crash within mgcpapp_free_sys_event_Q event dequeue loop after running 'ccm-manager config'

CSCvj72294

memory leak @ CCSIP_SPI_CONTR

CSCvj78876

CUBE: FPI Hung Sessions and Provisioning Failures observed in Standby CUBE

CSCvk22449

BGP Traceback/Crash seen with 20k IPv4 BGP scale after reload/clearing bgp

CSCvk71047

Router fails to reserve necessary ports for VPN traffic (UDP 500 & 4500) for ISAKMP

CSCvm01420

CUBE crashes at sipSPI_ipip_vcc_CheckCodecSetType

CSCvm03696

ISDN PRI calls getting dropped with cause 47 because of bad interaction between CDAPI and TSP layers

CSCvm32047

Device crashed when call-home is enabled and non-ascii characters in use in login banner

CSCvm51112

"clear crypto sa vrf MyVrf" triggers crash after updating pre-shared-keys

CSCvm54451

IPV6 prefix delegation issue in 881 router

CSCvm55465

BGP updates missing ISIS advertising-bits led to LDP label purge on peer.

CSCvm61279

Crash under AFW_application_process with shared-line configuration

CSCvm62419

Crash at CCB of RTPSPI at the moment of creating a disconnect timer

CSCvm64865

[EIGRP] a summary route is updated by an external route

CSCvm65979

ASR-CUBE: Crashes with call spike configuration changes

CSCvm74894

PKI authentication should proceed even if GetCACaps return any http failure

CSCvm74949

IOS-XE CUBE HA Crash with re-invite audio call escalated to video

CSCvm76452

IPSec background crash while sending SNMP trap

CSCvm86397

CUBE: Crash observed at rbuf_ooh_handler

CSCvm88569

WATCHDOG with DHCP Client

CSCvm93603

IP change on dialer-int does not trigger a correct "local cryto entpt"in DMVPN

CSCvm94112

DSM-3-INTERNAL: Internal Error : No DSM handle provided traceback on TDM voice gateway

CSCvm95236

BGP update not properly processed by inbound route-map

CSCvn00218

CUBE Crash in sipSPIAppAddCallInfoUI

CSCvn07969

Entry level conference register getting hung, resulting into no hardware conference

CSCvn11622

CUBE Crashes in SRTP-RTP call flows because of CSCvf93129 commit ( Needs rework)

CSCvn14454

iWAN router PDP crash on HUB MC due to PLR interface flapping w/o other available path

CSCvn14737

Crash with SIP call

CSCvn15588

loss of two way audio with Skinny Phone, Line instance does not work until the next reboot.

CSCvn17530

Router Crashes When PKI-CRL-IO_0 Runs out of Stack Space During Failed DNS Lookup for CA Server

CSCvn18712

CUBE incorrectly fomats SIP SDP with Content-Length > 1024

CSCvn18790

Cube crash with %SDP-3-SDP_PTR_ERROR

CSCvn22777

CUBE-HA: Standby CUBE reports error VOICE_HA-3-DATA_RECREATE_ERR: (STBY-Create) in CCAPI module

CSCvn28017

ISR4331 Routers May Crash When "eigrp default-route-tag" Configured on IPv4 AF

CSCvn31658

Removal of loopback interface causes router to crash and erases the conf register settings

CSCvn32526

Crash when making voice call via sip trunk

CSCvn32628

Crashed when type 'no service dhcp' with router use DHCP static binding file in DHCP pool

CSCvn33961

SSRC-field in RTCP gets changes to 0 when going through TRP present in the media path.

CSCvn36359

CUBE doesn't forward INVITE with "midcal-signalling passthru media-change" during a video escalation

CSCvn41467

Recommit of CSCvm99778 - eca/ewlc/qwlc/mewlc Sanity : AP join failed.

CSCvn44101

Router may experience a crash on process CENT-BR-0 when receiving an internal update

CSCvn47534

RTP/SRTP interworking fails when 18x w/o SDP is before 183 w/SDP

CSCvn54219

CUBE not doing session refresh, and not accepting the refresher in 200OK for the INVITE.

CSCvn59020

Modified EIGRP timers on Virtual-Template put all associated Vi interfaces into passive mode

CSCvn63198

iWAN domain password is overwritten by the global password, "password encryption aes"

CSCvn64296

Crash when making an external call

CSCvn68743

Flash corruption results in endless loop in dfs_init_inodetable

CSCvn69816

CUBE strips '+' sign from the called number in the outgoing INVITE.

CSCvn71862

IWAN Crash When Accessing Invalid Address

CSCvn78349

FlexVPN with password encryption - keyring aaa LIST password 6 xxxxx encrypted again upon reload

CSCvn81439

Crash closing background connections by form-based Webauth

CSCvn99281

Second modem on IR829-2LTE-EA-AK9 configuration lost after reload and going back to default settings

CSCvo05000

SIP global binding disappears when the interface to which SIP is bound flaps.

CSCvo07698

SRST Parallel hunt group fails if first member missing

CSCvo11786

SCCP Application does not clear failed sockets leading to leak and socket pool exhaustion

CSCvo12328

Mesh key generation must fail if the Virtual-WPAN interface is not yet up.

CSCvo24629

Chunk corruption crash when processing packet in CSDB_TCP_LISTEN state

CSCvo25089

Input Queue Wedge due to cTCP

CSCvo30329

Router crashing after upgrade due to Crypto commands "Block overrun at 284B2160 (red zone 000110DF)"

CSCvo81559

Router crashes after running "show interfaces transceiver detail"

Open Bugs—Cisco IOS Release 15.8(3)M2

Table 18. Open Bugs—Cisco IOS Release 15.8(3)M2

Caveat ID Number

Description

CSCuz39721

ASR1K/RP2/SW 15.4(3)S4 crash

CSCva36891

ISM-VPN: double counting of SNMP ifInOctets on sub-int with crypto map

CSCvb24236

FlexVPN: remote auth method isn't accepted in ikev2 profile

CSCvb51336

IKEv2 - Signature sign, verify failures seen with 4096 bit certificates with onboard crypto engine

CSCvc32200

Running "show usb device" command causes switch crash

CSCvc79296

Redundancy inter-device is not working with "security ipsec"

CSCve53112

ASR920: EC-5-MINLINKS_MET syslog is not generated

CSCvg12981

IPv6 ping fail, with VRF route leaking

CSCvh73576

config revert Rollback visible in console and locks up config from VTY

CSCvh82421

Port channels interface counters show decrement for CRC errors

CSCvj00317

Memory leak VOIP *MallocLite*

CSCvm33637

C881G-4G: Normal buffer leak with: pak_copy_network_start_particlized - cont #2.

CSCvm40582

Crash when entering username with aaa common-criteria policy password

CSCvm94891

Crash caused by a "TLB Modification exception" after processing a null chunk in "IP Input" process.

CSCvn71487

CUBE fails to send outgoing SUBSCRIBE if egress dial-peer has "session server-group" configured

CSCvn79227

QSIG - SIP - Connected Number Missing leading digit when decoding raw QSIG

CSCvn82489

CUBE changing the payload for content sharing packets, though it negotiate correctly

CSCvn98904

Standby reloads continuously in VSS if the configuration contains AES encryption and macsec (CTS)

CSCvo07212

BFD PP Process Crashes in Timer Wheel Replenish

CSCvo15003

CUBE - SDP version increment behaviour creates cypto interworking issues

CSCvo20620

CUBE DNS SRV Query is not performed for PRACK

CSCvo27961

"%IR800_SPI_FLASH-3-VERIFY_ERROR: SPI Flash verification error at block 0x900000"

CSCvo66216

IPSec-Session count in "show crypto eli" reaches max causing VPN failure

CSCvo70400

Reverse SSH bringing down RTS on serial interface

CSCvo72426

Flexible NetFlow Template ID is not getting exported

CSCvo82837

Transcoder getting invoked for SRTP-SRTP calls.

CSCvo89786

Virtual-Access may lead to packet drops with code IN_US_V4_PKT_FOUND_IPSEC_NOT_ENABLED

CSCvo94468

%PERF_MON_ASYNC-3-MEM: Memory cleanup failed - ssrc db cache results in PMI not created on BR

CSCvp00182

Bytes output in show policy-map is incorrect on dialer interface

CSCvp00329

SSH sessions stuck at ESTAB

Resolved Bugs—Cisco IOS Release 15.8(3)M1

Table 19. Resolved Bugs—Cisco IOS Release 15.8(3)M1

Caveat ID Number

Description

CSCua95810

IOS PKI: trustpoint doesn't rollover regenerated RSA keys.

CSCue58579

Different Interface Error Counter Results On Two Interfaces

CSCun27252

SNMP memory leak observed with snmp-server host configuration

CSCuu97037

RSP2_System_THS:traceback observed after standby RP upgrade in ISSU

CSCva46032

FlexVPN: Hostname in DHCP is incorrect when using AnyConnect

CSCvb17493

897: CFM syslog messages not displayed

CSCvb69966

Memory leak under LLDP Protocol process

CSCvb90483

VXML GW hardening changes for ICBC memory corruption issue

CSCve00087

Line-by-Line sync verifying failure on command: client test01 server-key 0 Password

CSCve08418

IPsec/IKEv2 Installation Sometimes Fails With Simultaneous Negotiations

CSCve39863

Rogue NA messages are corrupting ipv6 neighbor table.

CSCvf07430

CBR8 enhancements for cable nd validate feature

CSCvf16338

voiprtp_register_transport_port_manager_and_reserve: Alloc ports failed, min: 8000, max: 48199 248

CSCvf29967

"ip dfbit set" command is not present under l2tpv3 pseudowire-class for platform C891F-K9

CSCvg29037

Traceback is observed during mid-call media IP and port change

CSCvh26364

Anyconnect: Hairpinning fails with cef enabled

CSCvh49380

PFRv3 Incorrect reported value of TCA threshold in traffic-class router change history

CSCvj22537

Standby switch crashes when flow-exporter destination configured with Hostname

CSCvj29126

RADIUS client on network fails to solicit PAC key from CTS even though the device has a valid PAC

CSCvj29514

CME: Toll fraud app not automatically trusting traffic from phones

CSCvj66755

CNS Exec process crash @ cns_get_config_from_server

CSCvj71845

Backup path incorrect for ring topology where high ISIS cost is configured on 1 link.

CSCvj73544

ospf routing loop for external route with multiple VLINKs/ABRs

CSCvj78083

Path of Last Resort Sending Probes in Standby State

CSCvj78647

mtu cli is disappeared from show run when interface dialer sh/no shu

CSCvj90145

Zero Touch Provisioning (ZTP) fails to apply certain service instance configuration.

CSCvj91448

PKI:-IP address parsing issue while printing the subject name if classless IP is used in Trustpoint

CSCvj92548

CSR1k-FlexVPN: Spoke to Spoke: Implicit NHRP entry due to expired resolution request handling.

CSCvj95361

Crashed due to process = IPSec background proc

CSCvk00363

"ip address dhcp" may disappear from configuration affecting forwarding capability

CSCvk03910

OSPF neighbor stuck in loading after VSS switchover

CSCvk07838

CUBE is using wrong source IP address to send SIP error

CSCvk16323

Secure CME/SRST router with PRI/BRI not able send or receive calls

CSCvk20560

491 not sent in a multiple re-invites in DO2EO scenario

CSCvk22146

X25 translation failing on cisco 2900 router

CSCvk26109

ISAKMP using UDP500 rather peer(translated) port from peer structure while initiating IKE SA for DPD

CSCvk30939

Memory corruption at PKI Session End

CSCvk37875

High Availability system with two Voice Gateways - Crash

CSCvk39264

C887: Ports stay in down state after software upgrade

CSCvk51433

Lisp router crash with enabling IPv6 and DHCP relay.

CSCvk53405

Router crash - AFW_application_process

CSCvk54416

Change the order of BYE and NOTIFY with 200 OK sipfrag body for successful REFER passthru scenario

CSCvk56331

Initial contact in IKEv1 phase 2 rekey (QM1) causes all crypto sessions to drop

CSCvk63457

[3945e] VXML gateway crash @ mrcp functions

CSCvk65354

Extension Mobility Not working when used with Greek locale on SIP CME

CSCvk69075

No calls shown in output "show call active voice brief" on CUBE & stale entries are present

CSCvm02020

PMIPV6: Tunnel information on MAG for a GRE IPv6 tunnel shows invalid IPv4 addresses

CSCvm02627

Incorrect Contact port 5060 used instead of 5061 by CUBE in "302 Moved Temporarily" message

CSCvm08571

Rework need on CSCvj59170 to support SDP parsing

CSCvm19399

CRL file is getting overwritten when PKI server turns up after reload

CSCvm24689

One-way audio to IP phone if phone does hold/resume after 20 minutes on secure SIP GW

CSCvm32630

Crash due to out-of-memory condition, huge Memory @CENT-BR-0

CSCvm33538

SNMP queue full error on a router with VDSL controller

CSCvm40441

CFD: PNP DNS discovery with trust pool flow uses IP address in PNP profile instead of FQDN

CSCvm40496

iBGP PE-CE When Route-Reflect enable VRF import all Route Target.

CSCvm44524

On 'outbound' dial-peer with 'session server-group' , call forward returns 503 SIP error .

CSCvm45068

IOS CUBE Ent does not show 'media anti-trombone' in configuration

CSCvm53491

SIP CME Crashes when Calling Shared Line

CSCvm58960

"VoIP dial-Peer <XX> is Busied out" printed in log every 2 minutes when destination is not reachable

CSCvm59744

VXML GW with Nuance SpeechSuite 10.X or11.X, MRCPv2 recordutterance / SaveWaveform failure

CSCvm64975

G2 IWAN TC Class not Maintained

CSCvm65384

SNMP OID conflict.Trap being generated with wrong oid 6999.it should be 854

CSCvm66098

IR 829 Not able to bring up gig0 with SFP-mudule GLC-SX-MM-RGD

CSCvm76070

Not able to enable the CLI http-status-code-ignore

CSCvm76590

CUBE doesn't forward 200 OK in SRTP-RTP scenario with TCL script on Dial-peer

CSCvm83720

ISR 4431 GW crashed due to flex_dsprm_vtsp_close

CSCvm91837

IOS and IOS-XE STCAPP service not updating DTMF RFC2833 payload when there is SCCP renegotiation

CSCvm93701

1 way audio as voice dialpeers associate with wrong VRF id after a data interface Dialer wVRF flaps

CSCvm99036

CUBE Crash in CCSIP_SPI_CONTROL process

CSCvn17332

Memory leak at __be_crypto_acl_lookup_v4_hit_count_handle

Open Bugs—Cisco IOS Release 15.8(3)M1

Table 20. Open Bugs—Cisco IOS Release 15.8(3)M1

Caveat ID Number

Description

CSCuh84343

IOS/XE NTP synchronized but clock drifts

CSCux95215

Evaluation of sce for NTP_January_2016

CSCuy07466

Evaluation of sce for OpenSSL January 2016

CSCuy54627

Evaluation of sce for OpenSSL March 2016

CSCuz52530

Evaluation of sce for OpenSSL May 2016

CSCva86897

Traffic export (RITE) corrupts the copied packets received on a vDSL/PPPOE interface

CSCvc23570

Evaluation of sce for NTP November 2016

CSCvc39563

High CPU Due to "Async write proc" During Hung Filesystem Operation

CSCve39759

Memory leak under Chunk Manager / Firewall State

CSCvj28921

High CPU due to Alignment Corrections - SMEF & IWAN

CSCvk16922

Device-Sensor accounting TLVs not supported in ISR

CSCvm32047

Device crashed when call-home is enabled and non-ascii characters in use in login banner

CSCvm40582

Crash when entering username with aaa common-criteria policy password

CSCvm74894

PKI authentication should proceed even if GetCACaps return any http failure

CSCvm88569

WATCHDOG with DHCP Client

CSCvm91801

IR807G-LTE-VZ-K9 radio low power mode

CSCvm93603

IP change on dialer-int does not trigger a correct "local cryto entpt"in DMVPN

CSCvm93794

FlexVPN MPLS - label in CEF not added when shortcut to hub is created (by glitch)

CSCvm94891

Crash caused by a "TLB Modification exception" after processing a null chunk in "IP Input" process.

CSCvm98341

crash because of function "flow_exp_v5_new_pak"

CSCvn11434

IPSEC NAT-T / transport mode: UDP checksum not updated on decryption

CSCvn17530

Router Crashes When PKI-CRL-IO_0 Runs out of Stack Space During Failed DNS Lookup for CA Server

CSCvn18500

Certificate map does not work always with UPN in SAN field

CSCvn18712

CUBE incorrectly fomats SIP SDP with Content-Length > 1024

CSCvn32526

Crash when making voice call via sip trunk

CSCvn32628

Crashed when type 'no service dhcp' with router use DHCP static binding file in DHCP pool

CSCvn33961

SSRC-field in RTCP gets changes to 0 when going through TRP present in the media path.

Resolved Bugs—Cisco IOS Release 15.8(3)M0a

Table 21. Resolved Bugs—Cisco IOS Release 15.8(3)M0a

Caveat ID Number

Description

CSCvm07801

SMS triggers cellular modem crash.

Resolved Bugs—Cisco IOS Release 15.8(3)M0b

Table 22. Resolved Bugs—Cisco IOS Release 15.8(3)M0b

Caveat ID Number

Description

CSCvb11874

Crash seen when peer-group cmds are issued with bmp server configured

CSCve76947

Eigrp hmac-sha-256 secret string changes when show running-config is executed

CSCvg03444

Hub MC continues to send EIGRP SAF hellos after adjacency removed

CSCvg75315

ASR1K BGP scanner crash when change VRF and BGP configuration

CSCvg97010

load-balance advanced moving traffic to fallback path when primary path are not over utilized

CSCvh48610

iwan router crash while updating pmi policy

CSCvh49364

PFRv3 Incorrect time-stamp in traffic-class router change history

CSCvh57340

DMVPN: Crypto session stuck into UP-IDLE status after reconfiguring tunnel

CSCvh62615

There is junk entry in route-import table on branch when shutdown/no shutdown WAN interface

CSCvh77310

Wrong initial number of DPD incrementing error counter.

CSCvh85788

Local LAN-only prefix present in master route-import table but not present in site prefix DB

CSCvh88330

VAI Leaks with IKEv1 DVTI

CSCvi01558

iBGP dynamic peer using TTL 1

CSCvi41050

PFRv3 route-control is inconsistently set to "Disabled" on BR devices

CSCvi48837

Ensure load-balance internet TC's don't match 'class DEFAULT' if configured

CSCvi65958

Standby RP crashes due to Memory usage in ospf_insert_multicast_workQ

CSCvi66343

ASR1K Datapath is not passing CTS tagging over PfRV3 auto-tunnel with "cts sgt inline"

CSCvi67613

Protocol type for GRE header doesn't work consistently with "cts sgt inline" enable over auto-tunnel

CSCvi71733

Static configured prefix should be able to override old one for branch site-id change migration case

CSCvi74088

link local multicast packets are received when the SVI is in down state

CSCvj41550

default channel operation state changing from I/O to D/O failed when zero-sla enabled

CSCvj57502

Memory leak@CENT-BR-0 when change the path label frequently

CSCvj69654

OSPF originates default route without "default-information originate"

CSCvj78083

Path of Last Resort Sending Probes in Standby State

CSCvj84158

PfRv3: BR May Crash due to Channel Creation/Modification and Next-Hop State (Copied from CSCva72274)

CSCvk05687

Directly connected IPV6 connectivity broken 800 series router

CSCvk10633

bgp crash while running show command and same time bgp peer reset

CSCvk16771

ISIS for IP is enabled/installing routes in the RIB while IP routing is disabled

CSCvk24327

Branch BR crashed at cent_rpi_parent_del_user_ctx_by_ref with branch scale test

CSCvk27186

C800 : LLDP-MED packets have network-policy TLVs with DSCP 0 value by default

CSCvk66880

CUBE incorrectly fomats SIP SDP

CSCvk69093

CUBE is not responding to SIP INFO

CSCvm32630

Crash due to out-of-memory condition Memory leak@CENT-BR-0

Resolved Bugs—Cisco IOS Release 15.8(3)M

Table 23. Resolved Bugs—Cisco IOS Release 15.8(3)M

Caveat ID Number

Description

CSCus14734

IP SLA http operation with customizable status for return codes

CSCuv90519

Map doesn't get updated with socket change on local address change

CSCuw19844

router crash while connecting to the camera on the NAT enabled interface

CSCux45452

Spike seen in SLCP process due to specific OIDs being polled by SNMP

CSCuy79944

call-home crash because calling XOS API in interrupt level

CSCuy88330

Config Sync failure with Call-home, reporting smart-licensing-data

CSCva42638

Traceback is seen when a EEM script runs

CSCvb14640

Cisco IOS and Cisco IOS XE Software IPv6 SNMP Message Handling Denial of Service Vulnerability

CSCvb34443

ikev2 fragmentation not working with aes-gcm encryption - hmac failure

CSCvb59372

Double-free of VTY context causes a software-forced crash

CSCvb85345

IOS Crash in Timer Wheel Tick on High Timer Churn

CSCvb86484

wrong EIGRP redistribution statement in startup config breaks BGP settings atfer router reload

CSCvb88867

Excess BGP Traps Generated just after upgrade

CSCvc98571

EEM applet will not release the Config Session Lock if it ends when CLI is in configuration mode

CSCvd04871

Crash after IWAN does a recalculation in the RIB

CSCvd11951

High CPU utilization due to Virtual Exec process

CSCvd22385

IKEv2 when key-config key is lost, type 6 pre-shared key encrypted form is sent as pre-shared key

CSCvd50282

"password encryption aes" may break redundancy

CSCve34257

Autoboot sequence suspends on repeated power toggle

CSCvf16345

HTTP client source interface bind does not apply to virtual interfaces

CSCvf23339

Communication through Serial port not going through RTS down

CSCvf36269

Cisco IOS and IOS XE Software Plug-and-Play PKI API Certificate Validation Vulnerability

CSCvf53060

891FW Wlan-GigabitEthernet8 interface down in trunk mode

CSCvf57090

CUBE automatically considers re-INVITE with a=silenceSupp:off - - - - as fax call

CSCvf60862

Cisco IOS and IOS XE Software IOS daemon Cross-Site Scripting Vulnerability

CSCvf64068

SNMP Walk for cpmProcessEntry mib causes the crash

CSCvf70383

Crash in SDP Passthru when T.38 as 1st mline in mid-call SDP

CSCvf84295

Memory leak in IPSEC key engine process

CSCvf84528

False "voip_rtp_allocate_port:Possible port leak" errors

CSCvf96294

MIB counter for IPSec tunnels does not decrement under high tunnel scale and churn

CSCvg05452

IOS-XE router crash from memory corruption during CCB cleanup

CSCvg05896

IWAN EIGRP SAF - seq number mismatch after branch reload

CSCvg07428

PfRv3 triggers List Header leak in FNF

CSCvg08407

Hub MC get crashed@cent_mc_print_prefix_do_one when show domain iwan master site-prefix

CSCvg09235

OPTIONS not replied by CUBE over TCP without interface bind

CSCvg22515

After upgrade of IOS, SSH passwords longer than 25 characters do not work

CSCvg26494

Router Crashes Due to Memory Corruption When Transferring Shared Line Call

CSCvg28395

Crash when doing snmp walk for ipAddressEntry

CSCvg29770

CUBE Duplicates Diversion Header using DNS and SIP bindings

CSCvg30511

Normal buffer leak with: pak_copy_network_start_particlized - cont.

CSCvg34783

Voice-port command compand-type is remove during a reboot

CSCvg39082

Cisco device unexpectedly reloads after TCP session timeout

CSCvg40085

ISR4K - IOSd crash with SIGABRT with CCVPM_HTSP

CSCvg40371

%CGR1K_IOH_I2C-3-MUX_DANGLING: Attempt to enable MUX port no 1 while port no 1 is already enabled

CSCvg42253

ISR 4K unexpected reboot with a large number of transcoding sessions

CSCvg54074

3rd Party SIP Phones not registering from CME 11.6

CSCvg59604

Cube crashes intermittently multiple times within every two days.

CSCvg60185

ISR 4000 discards private RSA key after upgrade and reload with WAAS module

CSCvg68773

Global bind disappears when bind interface flaps during an active call

CSCvg69701

Cisco IOS Software 802.1x Multiple-Authentication Port Authentication Bypass Vulnerability

CSCvg71150

High CPU for 5 minutes causes DSP keepalive timeout and does not recover when using WCCP

CSCvg71566

"no cdp enable" is rewritten to "no cdp tlv app" after reload.

CSCvg74048

PKI: All SCEP requests fail with "Failed to send the request. There is another request in progress"

CSCvg76186

Cisco Smart Install Remote Code Execution and Denial of Service Vulnerability

CSCvg89163

CUBE does not acknowledge Session-Expires header in UPDATE

CSCvg98890

IOS-XE GM router might crash after the rekey method is changed from unicast to multicast

CSCvh05575

ISR 4k SCCP Process Does Not Wait for All PVDM Modules to Come Up Before Registering

CSCvh05611

IOSd crash while applying dial peer configuration

CSCvh12079

Router loses RSA keys and type 6 password encryption key upon boot with private-config encryption

CSCvh17481

PKI: Device crash during crl download with multiple CDP URI

CSCvh27195

ISR G2 VRF+PBR+NAT may not work with CEF under certain scenarios

CSCvh30035

ISM stops forwarding IPSEC traffic / %OCE-3-OCE_FWD_STATE_HANDLE / free_ob=75000

CSCvh32224

8800 KEM module not getting detected on 88XX phones with CME 12,11.6

CSCvh49600

Output "sh sip-ua connections tcp tls detail" shows that CUBE has stuck connection ids.

CSCvh52788

C841M SVI interface send redirect packet when the address doesn't exsit and it doesn't know the MAC

CSCvh55744

SSH password length restricted to 25 for avoiding one of the low impact vulnerability.

CSCvh61330

3650 -- high CPU due to TTY Background process

CSCvh64475

router crashed after entered "no ipv6 access-class sl_def_ipv6_acl in" during quiet mode

CSCvh65955

CME: SIP Notify to clear NightService display message not sent to phones during de-activation

CSCvh66033

IKEv2 - Crash with segmentation fault when debugs crypto ikev2 are enabled

CSCvh68228

CUBE Unsolicited NOTIFY returns 481 Subscription does not exist

CSCvh69512

DHCPOFFER is routed in global instead of VRF by RELAY AGENT

CSCvh70570

MGCP fallback mode remains ON after CUCM registered

CSCvh73134

ISDN memory leak

CSCvh75132

CPP crash stuck thread detected multikey_hash_replace_int

CSCvh79942

Chunk corruption crash related to PNP or Guestshell

CSCvh87009

Static NAT entry disappears from running-config with NVI nat

CSCvh99912

traceback: PM-4-NOSB: No PM subblock found for interface Gi0/0

CSCvi01805

Router with SIP traffic crashes at ccsip_free_kpml_info

CSCvi05172

Overruns due to nbar with bursty flows

CSCvi06417

SIP stack matching the dial-peer when processing NOTIFY message causing call routing issues

CSCvi06897

dialpeer matching for inbound SIP profile fails with VRFs

CSCvi15949

Cisco2921 ssh/console session hung when config script runs flowcontrol hardware command

CSCvi35960

VRF aware CUBE fails to send OOD OPTIONS pings

CSCvi42049

Crashes seen with C2900+ISM crypto engine with high traffic rates / high CPU

CSCvi85087

ACL sl_def_acl getting saved on running config

CSCvi93528

PI IOSd reload due to call-home at kex_dh_hash conn pointing to eem

CSCvj27172

Crash during Generic Call Filter Module cleanup

CSCvk27007

MGCP status remains Down after IOS upgrade caused by CSCvh70570

CSCvh92378

High CPU utlization with presence feature, when reset is issued under voice register global

CSCvj20285

Stack corruption crash on ESR

CSCvj78676

Router crashes @ memcpy, mdns_read_packet

Open Bugs—Cisco IOS Release 15.8(3)M

Table 24. Open Bugs—Cisco IOS Release 15.8(3)M

Caveat ID Number

Description

CSCef23633

Pushing additional config via VxWorks takes too long

CSCuu76493

Cisco IOS and IOS XE Software EnergyWise Denial of Service Vulnerabilities

CSCux95215

Evaluation of sce for NTP_January_2016

CSCuy07466

Evaluation of sce for OpenSSL January 2016

CSCuy54627

Evaluation of sce for OpenSSL March 2016

CSCuz39721

ASR1K/RP2/SW 15.4(3)S4 crash

CSCuz52530

Evaluation of sce for OpenSSL May 2016

CSCva86897

Traffic export (RITE) corrupts the copied packets received on a vDSL/PPPOE interface

CSCvb59747

Half duplex path streams (MoH) not established with source filter

CSCvc23570

Evaluation of sce for NTP November 2016

CSCvc39563

High CPU Due to "Async write proc" During Hung Filesystem Operation

CSCvc95767

MAT event not getting triggered in IE 3000 & IE4000

CSCve39759

Memory leak under Chunk Manager / Firewall State

CSCvf34608

Excessive "Reflector" Tracelogs

CSCvf54971

Router crashes after loading NBAR2 protocol pack

CSCvh26364

Anyconnect: Hairpinning fails with cef enabled

CSCvh31418

IR809/IR829 - Possible side-channel style information disclosure vuln

CSCvj28921

High CPU due to Alignment Corrections - SMEF & IWAN

CSCvj66755

CNS Exec process crash @ cns_get_config_from_server

CSCvj72273

GETVPN Key Servers after split may generate TEK with same SPI but different key material

CSCvj78647

mtu cli is disappeared from show run when interface dialer sh/no shu

CSCvj81564

%TCP-4-INVALIDTCB: Invalid TCB pointer: -Process= "Tcl Serv - tty705", ipl= 0, pid=

CSCvj83284

3650 mab failover does not work after first failed dot1x authentication

CSCvj95670

Router crashes as soon as it downloads the config from CUCM, ccm-manage config command.

CSCvj99413

Memory leak on the Small Buffer pool due to "x25swt_last_resort" process

CSCvk00363

"ip address dhcp" may disappear from configuration affecting forwarding capability

CSCvk02738

DMVPN crypto packets are not egressing C891

CSCvk04242

Command 'ipv6 tcp adjust-mss 1360' does not take effect with GETVPN

CSCvk05687

Directly connected IPV6 connectivity broken 800 series router

CSCvk13574

Incorrect values for conformed traffic upon applying PIR values greater than 4G

CSCvk16323

Secure SRST router with E1 PRI not able send or receive calls

CSCvk16922

Device-Sensor accounting TLVs not supported in ISR

CSCvk22146

X25 translation failing on cisco 2900 router

CSCvk27186

C800 : LLDP-MED packets have network-policy TLVs with DSCP 0 value by default

CSCvk28540

ACS URL not overwritten when sent from DHCP Server

CSCvk29692

DSP detected FXO "supervisory disconnect dualtone mid-call" is treated as CNG tone

CSCvk30939

Memory corruption at PKI Session End

CSCvk33579

C841M: usb dongle modem queue stuck

CSCvk34215

COOP ANN messages fail to send around the time of TEK generation

CSCvk39264

C887: Ports stay in down state after software upgrade

CSCvk39361

Dot1x on C886 routers fails in multi-domain mode

CSCvk49724

LLDP pkt drop on intf <Intf> when disabling lldp on this interface

CSCvk51433

LISP router crash with enabling IPv6 and DHCP relay.