PT-2017-16108 · Cisco · Cisco 2960X+2

Publicado 2017-01-18 · Atualizado 2019-10-03 · CVE-2017-3803

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Média

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco 2960X and 3750X switches versions 15.2(2)E3 through 15.2(4)E1

Description A vulnerability in the Cisco IOS Software forwarding queue could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue, leading to a partial denial of service (DoS) condition. The vulnerability is due to improper processing of IPv6 Neighbor Discovery (ND) packets. An attacker could exploit this vulnerability by sending a number of IPv6 ND packets to be processed by an affected device.

Recommendations For versions 15.2(2)E3, update to version 15.2(2)E6 or later. For version 15.2(4)E1, update to version 15.2(4)E3 or later. As a temporary workaround, consider restricting the processing of IPv6 ND packets to minimize the risk of exploitation.

Correção

DoS

Missing Release of Resource after Effective Lifetime

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

CVE-2017-3803

Produtos afetados

Cisco 2960X

Cisco 3750X

Cisco Ios

Referências · 5

• http://securitytracker.com/id/1037657 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-3803 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-catalyst · Aviso do Fabricante
• http://securityfocus.com/bid/95632 · Nota
• https://osv.dev/vulnerability/CVE-2017-3803 · Aviso do Fabricante