The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption or device reload) via a crafted DNS response, aka Bug ID CSCup90532.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:56
Type | Values Removed | Values Added |
---|---|---|
References | () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-dns - Vendor Advisory | |
References | () http://www.securityfocus.com/bid/93201Â - | |
References | () http://www.securitytracker.com/id/1036914Â - | |
References | () https://ics-cert.us-cert.gov/advisories/ICSA-16-287-04Â - |
Information
Published : 2016-10-05 20:59
Updated : 2024-11-21 02:56
NVD link : CVE-2016-6380
Mitre link : CVE-2016-6380
CVE.ORG link : CVE-2016-6380
JSON object : View
Products Affected
cisco
- ios_xe_3.3sg
- ios_xe_3.4sg
- ios_xe_3.2ja
- ios
- ios_xe_3.3xo
- ios_xe
CWE
CWE-20
Improper Input Validation