PT-2017-16108 · Cisco · Cisco 2960X+2

Published 2017-01-18 · Updated 2019-10-03 · CVE-2017-3803

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco 2960X and 3750X switches versions 15.2(2)E3 through 15.2(4)E1

Description A vulnerability in the Cisco IOS Software forwarding queue could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue, leading to a partial denial of service (DoS) condition. The vulnerability is due to improper processing of IPv6 Neighbor Discovery (ND) packets. An attacker could exploit this vulnerability by sending a number of IPv6 ND packets to be processed by an affected device.

Recommendations For versions 15.2(2)E3, update to version 15.2(2)E6 or later. For version 15.2(4)E1, update to version 15.2(4)E3 or later. As a temporary workaround, consider restricting the processing of IPv6 ND packets to minimize the risk of exploitation.

Fix

DoS

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2017-3803

Affected Products

Cisco 2960X

Cisco 3750X

Cisco Ios

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-3803 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-catalyst · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-3803 · Vendor Advisory
• http://securitytracker.com/id/1037657 · Note
• http://securityfocus.com/bid/95632 · Note