PT-2018-2011
CVE-2018-15373
·
Publicado
2018-09-26
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
7.4
AltaMétricasAV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Cisco IOS Software and Cisco IOS XE Software (affected versions not specified)
Description
A vulnerability in the implementation of Cisco Discovery Protocol functionality could allow an unauthenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper memory handling by the affected software when it processes high rates of Cisco Discovery Protocol packets sent to a device. An attacker could exploit this vulnerability by sending a high rate of Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to exhaust memory on the affected device, resulting in a DoS condition.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾