PT-2018-3714 · Cisco · Catalyst 4500E Supervisor Engine 8-E+8
Publicado
2018-03-28
·
Atualizado
2025-10-28
·
CVE-2018-0155
CVSS v3.1
8.6
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Cisco Catalyst 4500 Series Switches (affected versions not specified)
Cisco Catalyst 4500-X Series Switches (affected versions not specified)
Catalyst 4500 Supervisor Engine 6-E (K5)
Catalyst 4500 Supervisor Engine 6L-E (K10)
Catalyst 4500 Supervisor Engine 7-E (K10)
Catalyst 4500 Supervisor Engine 7L-E (K10)
Catalyst 4500E Supervisor Engine 8-E (K10)
Catalyst 4500E Supervisor Engine 8L-E (K10)
Catalyst 4500E Supervisor Engine 9-E (K10)
Catalyst 4500-X Series Switches (K10)
Catalyst 4900M Switch (K5)
Catalyst 4948E Ethernet Switch (K5)
Description
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial of service (DoS) condition. The vulnerability is due to insufficient error handling when the BFD header in a BFD packet is incomplete. An attacker could exploit this vulnerability by sending a crafted BFD message to or across an affected switch. A successful exploit could allow the attacker to trigger a reload of the system.
Recommendations
For Catalyst 4500 Supervisor Engine 6-E (K5), update to a fixed software version.
For Catalyst 4500 Supervisor Engine 6L-E (K10), update to a fixed software version.
For Catalyst 4500 Supervisor Engine 7-E (K10), update to a fixed software version.
For Catalyst 4500 Supervisor Engine 7L-E (K10), update to a fixed software version.
For Catalyst 4500E Supervisor Engine 8-E (K10), update to a fixed software version.
For Catalyst 4500E Supervisor Engine 8L-E (K10), update to a fixed software version.
For Catalyst 4500E Supervisor Engine 9-E (K10), update to a fixed software version.
For Catalyst 4500-X Series Switches (K10), update to a fixed software version.
For Catalyst 4900M Switch (K5), update to a fixed software version.
For Catalyst 4948E Ethernet Switch (K5), update to a fixed software version.
As a temporary workaround, consider disabling the BFD offload implementation until a patch is available.
Restrict access to the affected switches to minimize the risk of exploitation.
Correção
DoS
Improper Handling of Exceptional Conditions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Catalyst 4500 Series Switches
Catalyst 4500 Supervisor Engine 6-E
Catalyst 4500 Supervisor Engine 7-E
Catalyst 4500E Supervisor Engine 8-E
Catalyst 4500E Supervisor Engine 9-E
Catalyst 4900M Switch
Catalyst 4948E Ethernet Switch
Cisco Ios
Cisco Ios Xe