8.3

CVE-2016-6380

The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption or device reload) via a crafted DNS response, aka Bug ID CSCup90532.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version3.1.0s
Cisco ≫ Ios Xe Version3.1.0sg
Cisco ≫ Ios Xe Version3.1.1s
Cisco ≫ Ios Xe Version3.1.1sg
Cisco ≫ Ios Xe Version3.1.2s
Cisco ≫ Ios Xe Version3.1.3as
Cisco ≫ Ios Xe Version3.1.4as
Cisco ≫ Ios Xe Version3.1.4s
Cisco ≫ Ios Xe Version3.2.0se
Cisco ≫ Ios Xe Version3.2.1s
Cisco ≫ Ios Xe Version3.2.1se
Cisco ≫ Ios Xe Version3.2.2s
Cisco ≫ Ios Xe Version3.2.2se
Cisco ≫ Ios Xe Version3.2.3se
Cisco ≫ Ios Xe Version3.3.0s
Cisco ≫ Ios Xe Version3.3.0se
Cisco ≫ Ios Xe Version3.3.0sq
Cisco ≫ Ios Xe Version3.3.1s
Cisco ≫ Ios Xe Version3.3.1se
Cisco ≫ Ios Xe Version3.3.1sq
Cisco ≫ Ios Xe Version3.3.2s
Cisco ≫ Ios Xe Version3.3.2se
Cisco ≫ Ios Xe Version3.3.3se
Cisco ≫ Ios Xe Version3.3.4se
Cisco ≫ Ios Xe Version3.3.5se
Cisco ≫ Ios Xe Version3.4.0as
Cisco ≫ Ios Xe Version3.4.0s
Cisco ≫ Ios Xe Version3.4.0sq
Cisco ≫ Ios Xe Version3.4.1s
Cisco ≫ Ios Xe Version3.4.1sq
Cisco ≫ Ios Xe Version3.4.2s
Cisco ≫ Ios Xe Version3.4.3s
Cisco ≫ Ios Xe Version3.4.4s
Cisco ≫ Ios Xe Version3.4.5s
Cisco ≫ Ios Xe Version3.4.6s
Cisco ≫ Ios Xe Version3.5.0e
Cisco ≫ Ios Xe Version3.5.0s
Cisco ≫ Ios Xe Version3.5.0sq
Cisco ≫ Ios Xe Version3.5.1e
Cisco ≫ Ios Xe Version3.5.1s
Cisco ≫ Ios Xe Version3.5.1sq
Cisco ≫ Ios Xe Version3.5.2e
Cisco ≫ Ios Xe Version3.5.2s
Cisco ≫ Ios Xe Version3.5.2sq
Cisco ≫ Ios Xe Version3.5.3e
Cisco ≫ Ios Xe Version3.6.0e
Cisco ≫ Ios Xe Version3.6.0s
Cisco ≫ Ios Xe Version3.6.1e
Cisco ≫ Ios Xe Version3.6.1s
Cisco ≫ Ios Xe Version3.6.2ae
Cisco ≫ Ios Xe Version3.6.2e
Cisco ≫ Ios Xe Version3.6.2s
Cisco ≫ Ios Xe Version3.6.4e
Cisco ≫ Ios Xe Version3.7.0e
Cisco ≫ Ios Xe Version3.7.0s
Cisco ≫ Ios Xe Version3.7.1e
Cisco ≫ Ios Xe Version3.7.1s
Cisco ≫ Ios Xe Version3.7.2e
Cisco ≫ Ios Xe Version3.7.2s
Cisco ≫ Ios Xe Version3.7.2ts
Cisco ≫ Ios Xe Version3.7.3e
Cisco ≫ Ios Xe Version3.7.3s
Cisco ≫ Ios Xe Version3.7.4as
Cisco ≫ Ios Xe Version3.7.4s
Cisco ≫ Ios Xe Version3.7.5s
Cisco ≫ Ios Xe Version3.7.6s
Cisco ≫ Ios Xe Version3.7.7s
Cisco ≫ Ios Xe Version3.8.0e
Cisco ≫ Ios Xe Version3.8.0ex
Cisco ≫ Ios Xe Version3.8.0s
Cisco ≫ Ios Xe Version3.8.1e
Cisco ≫ Ios Xe Version3.8.1s
Cisco ≫ Ios Xe Version3.8.2s
Cisco ≫ Ios Xe Version3.9.0as
Cisco ≫ Ios Xe Version3.9.0s
Cisco ≫ Ios Xe Version3.9.1as
Cisco ≫ Ios Xe Version3.9.1s
Cisco ≫ Ios Xe Version3.9.2s
Cisco ≫ Ios Xe Version3.10.0s
Cisco ≫ Ios Xe Version3.10.1s
Cisco ≫ Ios Xe Version3.10.1xbs
Cisco ≫ Ios Xe Version3.10.2s
Cisco ≫ Ios Xe Version3.10.3s
Cisco ≫ Ios Xe Version3.10.4s
Cisco ≫ Ios Xe Version3.10.5s
Cisco ≫ Ios Xe Version3.10.6s
Cisco ≫ Ios Xe Version3.10.7s
Cisco ≫ Ios Xe Version3.11.0s
Cisco ≫ Ios Xe Version3.11.1s
Cisco ≫ Ios Xe Version3.11.2s
Cisco ≫ Ios Xe Version3.11.3s
Cisco ≫ Ios Xe Version3.11.4s
Cisco ≫ Ios Xe Version3.12.0as
Cisco ≫ Ios Xe Version3.12.0s
Cisco ≫ Ios Xe Version3.12.1s
Cisco ≫ Ios Xe Version3.12.2s
Cisco ≫ Ios Xe Version3.12.3s
Cisco ≫ Ios Xe Version3.12.4s
Cisco ≫ Ios Xe Version3.13.0as
Cisco ≫ Ios Xe Version3.13.0s
Cisco ≫ Ios Xe Version3.13.1s
Cisco ≫ Ios Xe Version3.13.2s
Cisco ≫ Ios Xe Version3.13.3s
Cisco ≫ Ios Xe Version3.13.4s
Cisco ≫ Ios Xe Version3.13.5s
Cisco ≫ Ios Xe Version3.14.0s
Cisco ≫ Ios Xe Version3.14.1s
Cisco ≫ Ios Xe Version3.14.2s
Cisco ≫ Ios Xe Version3.14.3s
Cisco ≫ Ios Xe Version3.15.0s
Cisco ≫ Ios Xe Version3.15.1cs
Cisco ≫ Ios Xe Version3.15.1s
Cisco ≫ Ios Xe Version3.15.2s
Cisco ≫ Ios Xe Version3.15.3s
Cisco ≫ Ios Xe 3.2ja Version3.2.0ja
Cisco ≫ Ios Xe 3.3sg Version3.3.0sg
Cisco ≫ Ios Xe 3.3sg Version3.3.1sg
Cisco ≫ Ios Xe 3.3sg Version3.3.2sg
Cisco ≫ Ios Xe 3.3xo Version3.3.0xo
Cisco ≫ Ios Xe 3.3xo Version3.3.1xo
Cisco ≫ Ios Xe 3.3xo Version3.3.2xo
Cisco ≫ Ios Xe 3.4sg Version3.4.0sg
Cisco ≫ Ios Xe 3.4sg Version3.4.1sg
Cisco ≫ Ios Xe 3.4sg Version3.4.2sg
Cisco ≫ Ios Xe 3.4sg Version3.4.3sg
Cisco ≫ Ios Xe 3.4sg Version3.4.4sg
Cisco ≫ Ios Xe 3.4sg Version3.4.5sg
Cisco ≫ Ios Xe 3.4sg Version3.4.6sg
Cisco ≫ Ios Xe 3.4sg Version3.4.7sg
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.67% 0.815
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.1 2.2 5.9
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 8.3 8.6 8.5
AV:N/AC:M/Au:N/C:P/I:P/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.