PT-2016-1470 · Cisco · Gigabit Switch Router (Gsr) 12000+2

Publicado 2016-03-11 · Atualizado 2016-12-03 · CVE-2016-1361

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices Cisco IOS (affected versions not specified)

Description The issue is related to improper input validation for the presence of a Bidirectional Forwarding Detection (BFD) header in a UDP packet. This allows remote attackers to cause a denial of service (line-card restart) via a crafted packet. The vulnerability is due to errors in resource management. An attacker could exploit this by sending a crafted UDP packet with a specific UDP port range to the affected device, causing a partial denial of service condition when a line card unexpectedly restarts.

Recommendations For Cisco IOS XR versions through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices: Update to a fixed software version. For Cisco IOS: At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the UDP ingress receive function to minimize the risk of exploitation. Avoid using the BFD header in UDP packets until the issue is resolved.

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2016-00771

CVE-2016-1361

Produtos afetados

Cisco Ios

Cisco Ios Xr

Gigabit Switch Router (Gsr) 12000

Referências · 5

• https://bdu.fstec.ru/vul/2016-00771 · Nota de Segurança
• http://securitytracker.com/id/1035314 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-1361 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1361 · Nota de Segurança