PT-2016-4807 · Cisco · Cisco Ios Xe+1

Published 2016-07-15 · Updated 2017-09-01 · CVE-2016-1459

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 and 15.0 through 15.5 Cisco IOS XE versions 3.13 through 3.17

Description A vulnerability in Border Gateway Protocol (BGP) message processing functions could allow an authenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of crafted BGP attributes. An attacker could exploit this vulnerability by sending crafted BGP messages to an affected device for processing when certain conditions are met. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition.

Recommendations For Cisco IOS versions 12.4 and 15.0 through 15.5, consider implementing workarounds that address this vulnerability. For Cisco IOS XE versions 3.13 through 3.17, consider implementing workarounds that address this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-1459

Affected Products

Cisco Ios

Cisco Ios Xe

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-1459 · Security Note
• https://osv.dev/vulnerability/CVE-2016-1459 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160715-bgp · Vendor Advisory
• http://securitytracker.com/id/1036321 · Note
• http://securityfocus.com/bid/91800 · Note