PT-2004-2080 · Cisco · Cisco Ios
Published
2004-11-10
·
Updated
2017-10-11
·
CVE-2004-1111
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions:
Cisco IOS versions 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command
Description:
The issue allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size. This occurs because the affected Cisco IOS devices keep undeliverable DHCP packets in the queue instead of dropping them. Cisco IOS devices running branches of Cisco IOS version 12.2S with Dynamic Host Configuration Protocol (DHCP) server or relay agent enabled are vulnerable to this denial of service.
Recommendations:
For versions 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command: consider applying the "no service dhcp" command to mitigate the issue.
For Cisco IOS devices running branches of Cisco IOS version 12.2S with Dynamic Host Configuration Protocol (DHCP) server or relay agent enabled: update to a fixed software version provided by Cisco to address this issue.
As a temporary workaround, consider disabling the DHCP server or relay agent until a patch is available.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Cisco Ios