PT-2014-5251 · Ietf+1 · Dhcpv6+2
Publicado
2014-09-24
·
Atualizado
2017-08-29
·
CVE-2014-3359
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco IOS versions 15.1 through 15.4
Cisco IOS XE versions 3.4.xS through 3.7.xS before 3.7.6S
Cisco IOS XE versions 3.8.xS through 3.10.xS before 3.10.1S
Cisco IOS XE versions 3.11.xS before 3.12S
Description
A memory leak in the DHCP version 6 (DHCPv6) server implementation allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed DHCPv6 packets. The vulnerability is due to improper parsing of malformed DHCPv6 packets. An attacker could exploit this vulnerability by sending malformed DHCPv6 packets to be processed by an affected device, causing a memory leak and eventual reload of the device.
Recommendations
For Cisco IOS versions 15.1 through 15.4, update to a fixed version to address the vulnerability.
For Cisco IOS XE versions 3.4.xS through 3.7.xS, update to version 3.7.6S or later to address the vulnerability.
For Cisco IOS XE versions 3.8.xS through 3.10.xS, update to version 3.10.1S or later to address the vulnerability.
For Cisco IOS XE versions 3.11.xS, update to version 3.12S or later to address the vulnerability.
As a temporary workaround, consider restricting access to the DHCPv6 server implementation to minimize the risk of exploitation.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cisco Ios
Cisco Ios Xe
Dhcpv6