6.5

CVE-2018-0197

Cisco IOS and IOS XE Software VLAN Trunking Protocol Denial of Service Vulnerability

A vulnerability in the VLAN Trunking Protocol (VTP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to corrupt the internal VTP database on an affected device and cause a denial of service (DoS) condition. The vulnerability is due to a logic error in how the affected software handles a subset of VTP packets. An attacker could exploit this vulnerability by sending VTP packets in a sequence that triggers a timeout in the VTP message processing code of the affected software. A successful exploit could allow the attacker to impact the ability to create, modify, or delete VLANs and cause a DoS condition. There are workarounds that address this vulnerability. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS Software or Cisco IOS XE Software, are operating in VTP client mode or VTP server mode, and do not have a VTP domain name configured. The default configuration for Cisco devices that are running Cisco IOS Software or Cisco IOS XE Software and support VTP is to operate in VTP server mode with no domain name configured.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version -
Cisco ≫ Ios Xe Version 3.2.0ja
Cisco ≫ Ios Xe Version 3.2.0se
Cisco ≫ Ios Xe Version 3.2.0sg
Cisco ≫ Ios Xe Version 3.2.1se
Cisco ≫ Ios Xe Version 3.2.1sg
Cisco ≫ Ios Xe Version 3.2.2se
Cisco ≫ Ios Xe Version 3.2.2sg
Cisco ≫ Ios Xe Version 3.2.3se
Cisco ≫ Ios Xe Version 3.2.3sg
Cisco ≫ Ios Xe Version 3.2.4sg
Cisco ≫ Ios Xe Version 3.2.5sg
Cisco ≫ Ios Xe Version 3.2.6sg
Cisco ≫ Ios Xe Version 3.2.7sg
Cisco ≫ Ios Xe Version 3.2.8sg
Cisco ≫ Ios Xe Version 3.2.9sg
Cisco ≫ Ios Xe Version 3.2.10sg
Cisco ≫ Ios Xe Version 3.2.11sg
Cisco ≫ Ios Xe Version 3.3.0se
Cisco ≫ Ios Xe Version 3.3.0sg
Cisco ≫ Ios Xe Version 3.3.0sq
Cisco ≫ Ios Xe Version 3.3.0xo
Cisco ≫ Ios Xe Version 3.3.1se
Cisco ≫ Ios Xe Version 3.3.1sg
Cisco ≫ Ios Xe Version 3.3.1sq
Cisco ≫ Ios Xe Version 3.3.1xo
Cisco ≫ Ios Xe Version 3.3.2se
Cisco ≫ Ios Xe Version 3.3.2sg
Cisco ≫ Ios Xe Version 3.3.2xo
Cisco ≫ Ios Xe Version 3.3.3se
Cisco ≫ Ios Xe Version 3.3.4se
Cisco ≫ Ios Xe Version 3.3.5se
Cisco ≫ Ios Xe Version 3.4.0sg
Cisco ≫ Ios Xe Version 3.4.0sq
Cisco ≫ Ios Xe Version 3.4.1sg
Cisco ≫ Ios Xe Version 3.4.1sq
Cisco ≫ Ios Xe Version 3.4.2sg
Cisco ≫ Ios Xe Version 3.4.3sg
Cisco ≫ Ios Xe Version 3.4.4sg
Cisco ≫ Ios Xe Version 3.4.5sg
Cisco ≫ Ios Xe Version 3.4.6sg
Cisco ≫ Ios Xe Version 3.4.7sg
Cisco ≫ Ios Xe Version 3.4.8sg
Cisco ≫ Ios Xe Version 3.5.0e
Cisco ≫ Ios Xe Version 3.5.0sq
Cisco ≫ Ios Xe Version 3.5.1e
Cisco ≫ Ios Xe Version 3.5.1sq
Cisco ≫ Ios Xe Version 3.5.2e
Cisco ≫ Ios Xe Version 3.5.2sq
Cisco ≫ Ios Xe Version 3.5.3e
Cisco ≫ Ios Xe Version 3.5.3sq
Cisco ≫ Ios Xe Version 3.5.4sq
Cisco ≫ Ios Xe Version 3.5.5sq
Cisco ≫ Ios Xe Version 3.5.6sq
Cisco ≫ Ios Xe Version 3.5.7sq
Cisco ≫ Ios Xe Version 3.6.0ae
Cisco ≫ Ios Xe Version 3.6.0be
Cisco ≫ Ios Xe Version 3.6.0e
Cisco ≫ Ios Xe Version 3.6.1e
Cisco ≫ Ios Xe Version 3.6.2ae
Cisco ≫ Ios Xe Version 3.6.2e
Cisco ≫ Ios Xe Version 3.6.3e
Cisco ≫ Ios Xe Version 3.6.4e
Cisco ≫ Ios Xe Version 3.6.5ae
Cisco ≫ Ios Xe Version 3.6.5be
Cisco ≫ Ios Xe Version 3.6.5e
Cisco ≫ Ios Xe Version 3.6.6e
Cisco ≫ Ios Xe Version 3.7.0e
Cisco ≫ Ios Xe Version 3.7.1e
Cisco ≫ Ios Xe Version 3.7.2e
Cisco ≫ Ios Xe Version 3.7.3e
Cisco ≫ Ios Xe Version 3.7.4e
Cisco ≫ Ios Xe Version 3.7.5e
Cisco ≫ Ios Xe Version 3.8.0e
Cisco ≫ Ios Xe Version 3.8.1e
Cisco ≫ Ios Xe Version 3.8.2e
Cisco ≫ Ios Xe Version 3.8.3e
Cisco ≫ Ios Xe Version 3.8.4e
Cisco ≫ Ios Xe Version 3.8.5ae
Cisco ≫ Ios Xe Version 3.8.5e
Cisco ≫ Ios Xe Version 3.9.0e
Cisco ≫ Ios Xe Version 3.9.1e
Cisco ≫ Ios Xe Version 3.9.2be
Cisco ≫ Ios Xe Version 3.9.2e
Cisco ≫ Ios Xe Version 3.10.4s
Cisco ≫ Ios Xe Version 3.12.0as
Cisco ≫ Ios Xe Version 3.15.0s
Cisco ≫ Ios Xe Version 3.15.1cs
Cisco ≫ Ios Xe Version 3.15.1s
Cisco ≫ Ios Xe Version 3.15.2s
Cisco ≫ Ios Xe Version 3.15.3s
Cisco ≫ Ios Xe Version 3.15.4s
Cisco ≫ Ios Xe Version 3.16.0bs
Cisco ≫ Ios Xe Version 3.16.0cs
Cisco ≫ Ios Xe Version 3.16.0s
Cisco ≫ Ios Xe Version 3.16.1as
Cisco ≫ Ios Xe Version 3.16.1s
Cisco ≫ Ios Xe Version 3.16.2s
Cisco ≫ Ios Xe Version 3.16.3s
Cisco ≫ Ios Xe Version 3.16.4as
Cisco ≫ Ios Xe Version 3.16.4bs
Cisco ≫ Ios Xe Version 3.16.4cs
Cisco ≫ Ios Xe Version 3.16.4ds
Cisco ≫ Ios Xe Version 3.16.4es
Cisco ≫ Ios Xe Version 3.16.4gs
Cisco ≫ Ios Xe Version 3.16.5as
Cisco ≫ Ios Xe Version 3.16.5bs
Cisco ≫ Ios Xe Version 3.16.5s
Cisco ≫ Ios Xe Version 3.16.6bs
Cisco ≫ Ios Xe Version 3.16.6s
Cisco ≫ Ios Xe Version 3.17.0s
Cisco ≫ Ios Xe Version 3.17.1s
Cisco ≫ Ios Xe Version 3.17.3s
Cisco ≫ Ios Xe Version 3.17.4s
Cisco ≫ Ios Xe Version 16.1.1
Cisco ≫ Ios Xe Version 16.1.2
Cisco ≫ Ios Xe Version 16.1.3
Cisco ≫ Ios Xe Version 16.2.1
Cisco ≫ Ios Xe Version 16.2.2
Cisco ≫ Ios Xe Version 16.3.1
Cisco ≫ Ios Xe Version 16.3.1a
Cisco ≫ Ios Xe Version 16.3.2
Cisco ≫ Ios Xe Version 16.3.3
Cisco ≫ Ios Xe Version 16.3.4
Cisco ≫ Ios Xe Version 16.3.5
Cisco ≫ Ios Xe Version 16.3.5b
Cisco ≫ Ios Xe Version 16.4.1
Cisco ≫ Ios Xe Version 16.4.2
Cisco ≫ Ios Xe Version 16.5.1
Cisco ≫ Ios Xe Version 16.5.1a
Cisco ≫ Ios Xe Version 16.5.1b
Cisco ≫ Ios Xe Version 16.5.2
Cisco ≫ Ios Xe Version 16.6.1
Cisco ≫ Ios Xe Version 16.6.2
Cisco ≫ Ios Xe Version 16.7.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.63% 0.452
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/105424
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-vtp
Vendor Advisory