PT-2016-4807 · Cisco · Cisco Ios Xe+1

Publicado 2016-07-15 · Atualizado 2017-09-01 · CVE-2016-1459

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 and 15.0 through 15.5 Cisco IOS XE versions 3.13 through 3.17

Description A vulnerability in Border Gateway Protocol (BGP) message processing functions could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of crafted BGP attributes. An attacker could exploit this vulnerability by sending crafted BGP messages to an affected device for processing when certain conditions are met. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

Recommendations For Cisco IOS versions 12.4 and 15.0 through 15.5, consider implementing workarounds that address this vulnerability. For Cisco IOS XE versions 3.13 through 3.17, consider implementing workarounds that address this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-1459

Produtos afetados

Cisco Ios

Cisco Ios Xe

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-1459 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-1459 · Aviso do Fabricante
• http://securitytracker.com/id/1036321 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160715-bgp · Aviso do Fabricante
• http://securityfocus.com/bid/91800 · Nota