A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on affected system. The vulnerability is due to improper handling of malformed requests processed by the netconf process. An attacker could exploit this vulnerability by sending malicious requests to the affected software. An exploit could allow the attacker to cause the targeted process to restart, resulting in a DoS condition on the affected system. Cisco Bug IDs: CSCvg95792.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/104083 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1040827 | Third Party Advisory VDB Entry |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-iosxr | Vendor Advisory |
| http://www.securityfocus.com/bid/104083 | Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1040827 | Third Party Advisory VDB Entry |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-iosxr | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/104083 - Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1040827 - Third Party Advisory, VDB Entry | |
| References | () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-iosxr - Vendor Advisory |
Information
Published : 2018-05-02 22:29
Updated : 2024-11-21 03:37
NVD link : CVE-2018-0286
Mitre link : CVE-2018-0286
CVE.ORG link : CVE-2018-0286
JSON object : View
Products Affected
cisco
- ios_xr