CVE-2018-0151

Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability

Ios Xe

A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges. The vulnerability is due to incorrect bounds checking of certain values in packets that are destined for UDP port 18999 of an affected device. An attacker could exploit this vulnerability by sending malicious packets to an…

29. Mär 2018

Ausgewertete Quellen

• Hersteller
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-qos
• Hinweis
  http://www.securityfocus.com/bid/103540
• Hinweis
  http://www.securitytracker.com/id/1040582
• Hinweis
  https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0151
• CISA
  Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
• NVD
  CVE-2018-0151