CVE-2017-12237

Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability

Ios

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to how an affected device processes certain IKEv2 packets. An attacker could exploit this vulnerability by sending specific IKEv2…

29. Sep 2017

Ausgewertete Quellen

• Hersteller
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170927-ike
• Hinweis
  http://www.securityfocus.com/bid/101037
• Hinweis
  http://www.securitytracker.com/id/1039460
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-12237
• CISA
  Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
• NVD
  CVE-2017-12237