PT-2016-2113 · Cisco · Cisco Ios Xr

Published 2016-05-19 · Updated 2016-12-01 · CVE-2016-1407

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.3.2 and earlier

Description The issue is due to improper handling of Local Packet Transport Services (LPTS) flow-base entries. This can cause too many known entries for a protocol to be created, leading to existing or new sessions being dropped. An attacker could exploit this by sending continuous connection attempts to open TCP ports, causing an exhaustion of services and resulting in a limited denial of service (DoS) condition.

Recommendations For Cisco IOS XR versions 5.3.2 and earlier, update to a version that addresses this issue, as software updates have been released by Cisco to fix the vulnerability. At the moment, there is no information about other workarounds that could mitigate this issue.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2016-01466

CVE-2016-1407

Affected Products

Cisco Ios Xr

References · 5

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160519-ios-xr · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01466 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1407 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1407 · Security Note
• http://securitytracker.com/id/1035934 · Note