PT-2018-8636 · Cisco · Cisco Ios Xr

Published 2018-01-31 · Updated 2020-09-04 · CVE-2018-0136

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9000 Series

Description: A vulnerability in the IPv6 subsystem could allow an unauthenticated, remote attacker to trigger a reload of one or more Trident-based line cards, resulting in a denial of service (DoS) condition. The issue is due to incorrect handling of IPv6 packets with a fragment header extension. An attacker could exploit this by sending IPv6 packets designed to trigger the issue either to or through the Trident-based line card. A successful exploit could allow the attacker to trigger a reload of Trident-based line cards, resulting in a DoS during the period of time the line card takes to restart.

Recommendations: Apply the software maintenance upgrade (SMU) that addresses this vulnerability. Alternatively, upgrade to service pack 7 for Cisco IOS XR Software Release 5.3.4.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-0136

Affected Products

Cisco Ios Xr

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-0136 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0136 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180131-ipv6 · Vendor Advisory
• http://securityfocus.com/bid/102905 · Note
• http://securitytracker.com/id/1040315 · Note