Cisco IOS XE Software Switch Integrated Security Features IPv6 Denial of Service Vulnerability
A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge. The vulnerability is due to incorrect handling of crafted IPv6 packets. An attacker could exploit this vulnerability by sending crafted IPv6 packets through the device. An exploit could allow the attacker to cause an interface queue wedge. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-sisf ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-sisf"]
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-0164US | high8.6 | — | ||
A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge. The vulnerabi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-sisfexternal
- Security Vulnerability Policyexternal
- Cisco IOS and NX-OS Software Reference Guideexternal
- Cisco IOS XE 2 Release Notesexternal
- Cisco IOS XE 3S Release Notesexternal
- Cisco IOS XE 3SG Release Notesexternal
- Cisco Security Advisories and Alerts pageexternal
Behebungen (1)
- BehobenCisco IOS XE Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan