PT-2016-6859 · Cisco · Cisco Ios Xe

Published 2016-09-28 · Updated 2017-07-30 · CVE-2016-6378

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.1 through 3.17 Cisco IOS XE versions 16.1 through 16.2

Description A vulnerability in the implementation of Network Address Translation (NAT) functionality could allow an unauthenticated, remote attacker to cause an affected device to reload. The issue is due to improper handling of malformed ICMP packets by the affected software. An attacker could exploit this by sending crafted ICMP packets that require NAT processing, resulting in a denial of service (DoS) condition.

Recommendations For Cisco IOS XE versions 3.1 through 3.17, update to a fixed software version. For Cisco IOS XE versions 16.1 through 16.2, update to a fixed software version.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-6378

Affected Products

Cisco Ios Xe

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6378 · Security Note
• https://osv.dev/vulnerability/CVE-2016-6378 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-esp-nat · Vendor Advisory
• http://securityfocus.com/bid/93200 · Note
• http://securitytracker.com/id/1036914 · Note