8.3

CVE-2016-6380

The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption or device reload) via a crafted DNS response, aka Bug ID CSCup90532.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version 3.1.0s
Cisco ≫ Ios Xe Version 3.1.0sg
Cisco ≫ Ios Xe Version 3.1.1s
Cisco ≫ Ios Xe Version 3.1.1sg
Cisco ≫ Ios Xe Version 3.1.2s
Cisco ≫ Ios Xe Version 3.1.3as
Cisco ≫ Ios Xe Version 3.1.4as
Cisco ≫ Ios Xe Version 3.1.4s
Cisco ≫ Ios Xe Version 3.2.0se
Cisco ≫ Ios Xe Version 3.2.1s
Cisco ≫ Ios Xe Version 3.2.1se
Cisco ≫ Ios Xe Version 3.2.2s
Cisco ≫ Ios Xe Version 3.2.2se
Cisco ≫ Ios Xe Version 3.2.3se
Cisco ≫ Ios Xe Version 3.3.0s
Cisco ≫ Ios Xe Version 3.3.0se
Cisco ≫ Ios Xe Version 3.3.0sq
Cisco ≫ Ios Xe Version 3.3.1s
Cisco ≫ Ios Xe Version 3.3.1se
Cisco ≫ Ios Xe Version 3.3.1sq
Cisco ≫ Ios Xe Version 3.3.2s
Cisco ≫ Ios Xe Version 3.3.2se
Cisco ≫ Ios Xe Version 3.3.3se
Cisco ≫ Ios Xe Version 3.3.4se
Cisco ≫ Ios Xe Version 3.3.5se
Cisco ≫ Ios Xe Version 3.4.0as
Cisco ≫ Ios Xe Version 3.4.0s
Cisco ≫ Ios Xe Version 3.4.0sq
Cisco ≫ Ios Xe Version 3.4.1s
Cisco ≫ Ios Xe Version 3.4.1sq
Cisco ≫ Ios Xe Version 3.4.2s
Cisco ≫ Ios Xe Version 3.4.3s
Cisco ≫ Ios Xe Version 3.4.4s
Cisco ≫ Ios Xe Version 3.4.5s
Cisco ≫ Ios Xe Version 3.4.6s
Cisco ≫ Ios Xe Version 3.5.0e
Cisco ≫ Ios Xe Version 3.5.0s
Cisco ≫ Ios Xe Version 3.5.0sq
Cisco ≫ Ios Xe Version 3.5.1e
Cisco ≫ Ios Xe Version 3.5.1s
Cisco ≫ Ios Xe Version 3.5.1sq
Cisco ≫ Ios Xe Version 3.5.2e
Cisco ≫ Ios Xe Version 3.5.2s
Cisco ≫ Ios Xe Version 3.5.2sq
Cisco ≫ Ios Xe Version 3.5.3e
Cisco ≫ Ios Xe Version 3.6.0e
Cisco ≫ Ios Xe Version 3.6.0s
Cisco ≫ Ios Xe Version 3.6.1e
Cisco ≫ Ios Xe Version 3.6.1s
Cisco ≫ Ios Xe Version 3.6.2ae
Cisco ≫ Ios Xe Version 3.6.2e
Cisco ≫ Ios Xe Version 3.6.2s
Cisco ≫ Ios Xe Version 3.6.4e
Cisco ≫ Ios Xe Version 3.7.0e
Cisco ≫ Ios Xe Version 3.7.0s
Cisco ≫ Ios Xe Version 3.7.1e
Cisco ≫ Ios Xe Version 3.7.1s
Cisco ≫ Ios Xe Version 3.7.2e
Cisco ≫ Ios Xe Version 3.7.2s
Cisco ≫ Ios Xe Version 3.7.2ts
Cisco ≫ Ios Xe Version 3.7.3e
Cisco ≫ Ios Xe Version 3.7.3s
Cisco ≫ Ios Xe Version 3.7.4as
Cisco ≫ Ios Xe Version 3.7.4s
Cisco ≫ Ios Xe Version 3.7.5s
Cisco ≫ Ios Xe Version 3.7.6s
Cisco ≫ Ios Xe Version 3.7.7s
Cisco ≫ Ios Xe Version 3.8.0e
Cisco ≫ Ios Xe Version 3.8.0ex
Cisco ≫ Ios Xe Version 3.8.0s
Cisco ≫ Ios Xe Version 3.8.1e
Cisco ≫ Ios Xe Version 3.8.1s
Cisco ≫ Ios Xe Version 3.8.2s
Cisco ≫ Ios Xe Version 3.9.0as
Cisco ≫ Ios Xe Version 3.9.0s
Cisco ≫ Ios Xe Version 3.9.1as
Cisco ≫ Ios Xe Version 3.9.1s
Cisco ≫ Ios Xe Version 3.9.2s
Cisco ≫ Ios Xe Version 3.10.0s
Cisco ≫ Ios Xe Version 3.10.1s
Cisco ≫ Ios Xe Version 3.10.1xbs
Cisco ≫ Ios Xe Version 3.10.2s
Cisco ≫ Ios Xe Version 3.10.3s
Cisco ≫ Ios Xe Version 3.10.4s
Cisco ≫ Ios Xe Version 3.10.5s
Cisco ≫ Ios Xe Version 3.10.6s
Cisco ≫ Ios Xe Version 3.10.7s
Cisco ≫ Ios Xe Version 3.11.0s
Cisco ≫ Ios Xe Version 3.11.1s
Cisco ≫ Ios Xe Version 3.11.2s
Cisco ≫ Ios Xe Version 3.11.3s
Cisco ≫ Ios Xe Version 3.11.4s
Cisco ≫ Ios Xe Version 3.12.0as
Cisco ≫ Ios Xe Version 3.12.0s
Cisco ≫ Ios Xe Version 3.12.1s
Cisco ≫ Ios Xe Version 3.12.2s
Cisco ≫ Ios Xe Version 3.12.3s
Cisco ≫ Ios Xe Version 3.12.4s
Cisco ≫ Ios Xe Version 3.13.0as
Cisco ≫ Ios Xe Version 3.13.0s
Cisco ≫ Ios Xe Version 3.13.1s
Cisco ≫ Ios Xe Version 3.13.2s
Cisco ≫ Ios Xe Version 3.13.3s
Cisco ≫ Ios Xe Version 3.13.4s
Cisco ≫ Ios Xe Version 3.13.5s
Cisco ≫ Ios Xe Version 3.14.0s
Cisco ≫ Ios Xe Version 3.14.1s
Cisco ≫ Ios Xe Version 3.14.2s
Cisco ≫ Ios Xe Version 3.14.3s
Cisco ≫ Ios Xe Version 3.15.0s
Cisco ≫ Ios Xe Version 3.15.1cs
Cisco ≫ Ios Xe Version 3.15.1s
Cisco ≫ Ios Xe Version 3.15.2s
Cisco ≫ Ios Xe Version 3.15.3s
Cisco ≫ Ios Xe 3.2ja Version 3.2.0ja
Cisco ≫ Ios Xe 3.3sg Version 3.3.0sg
Cisco ≫ Ios Xe 3.3sg Version 3.3.1sg
Cisco ≫ Ios Xe 3.3sg Version 3.3.2sg
Cisco ≫ Ios Xe 3.3xo Version 3.3.0xo
Cisco ≫ Ios Xe 3.3xo Version 3.3.1xo
Cisco ≫ Ios Xe 3.3xo Version 3.3.2xo
Cisco ≫ Ios Xe 3.4sg Version 3.4.0sg
Cisco ≫ Ios Xe 3.4sg Version 3.4.1sg
Cisco ≫ Ios Xe 3.4sg Version 3.4.2sg
Cisco ≫ Ios Xe 3.4sg Version 3.4.3sg
Cisco ≫ Ios Xe 3.4sg Version 3.4.4sg
Cisco ≫ Ios Xe 3.4sg Version 3.4.5sg
Cisco ≫ Ios Xe 3.4sg Version 3.4.6sg
Cisco ≫ Ios Xe 3.4sg Version 3.4.7sg
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.01% 0.857
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.1 2.2 5.9
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 8.3 8.6 8.5
AV:N/AC:M/Au:N/C:P/I:P/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securitytracker.com/id/1036914
https://ics-cert.us-cert.gov/advisories/ICSA-16-287-04
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-dns
Vendor Advisory
http://www.securityfocus.com/bid/93201