PT-2016-6939 · Cisco · Staros

Published 2016-12-14 · Updated 2017-01-05 · CVE-2016-6467

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch versions 20.0.0 through 21.0.M0.64702

Description A vulnerability in IPv6 packet fragment reassembly could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit (NPU) process.

Recommendations For version 20.0.0, update to version 21.0.0.65256 or later. For version 21.0.0, update to version 21.0.0.65256 or later. For version 21.0.M0.64702, update to version 21.0.M0.64970 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-6467

Affected Products

Staros

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6467 · Security Note
• https://osv.dev/vulnerability/CVE-2016-6467 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-asr · Vendor Advisory
• http://securitytracker.com/id/1037416 · Note
• http://securityfocus.com/bid/94772 · Note