PT-2016-4783 · Cisco · Cisco Ios Xr

Publicado 2016-09-14 · Atualizado 2017-07-30 · CVE-2016-1433

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 6.0 through 6.0.1

Description The issue is caused by insufficient logic in the processing of crafted OSPFv3 packets, allowing an unauthenticated, remote attacker to cause a reload of the OSPFv3 process. This results in a limited denial of service (DoS) condition on an affected device. An attacker could exploit this by sending crafted OSPFv3 packets to be processed by an affected device.

Recommendations For Cisco IOS XR versions 6.0 through 6.0.1, update to a newer version that addresses this issue, as software updates have been released by Cisco.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-1433

Produtos afetados

Cisco Ios Xr

Referências · 5

• http://securitytracker.com/id/1036832 · Nota
• http://securityfocus.com/bid/92961 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-iosxr · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-1433 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1433 · Nota de Segurança