PT-2016-1619 · Cisco · Cisco Ios Xe+1

Published 2016-03-23 · Updated 2017-05-12 · CVE-2016-1344

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.6 Cisco IOS XE versions 3.3 through 3.17

Description The issue is related to an improper handling of crafted, fragmented IKEv2 packets in the Internet Key Exchange (IKE) version 2 (v2) fragmentation code of Cisco IOS and IOS XE Software. This could allow an unauthenticated, remote attacker to cause a reload of the affected system by sending crafted UDP packets. The vulnerability can be triggered by both IPv4 and IPv6 traffic. Only traffic directed to the affected system can be used to exploit this vulnerability.

Recommendations For Cisco IOS versions 15.0 through 15.6, update to a version that includes the fix for this issue. For Cisco IOS XE versions 3.3 through 3.17, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the affected system to minimize the risk of exploitation.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2016-00920

CVE-2016-1344

Affected Products

Cisco Ios

Cisco Ios Xe

References · 6

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ios-ikev2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00920 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1344 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1344 · Security Note
• http://securitytracker.com/id/1035382 · Note
• http://securityfocus.com/bid/85311 · Note