Veille CVE
CVE-2018-0167
8.8 Élevée Exploitée activementCatalogue CISA KEV — Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
Ajoutée le 03/03/2022 · Échéance de correction (agences US) : 17/03/2022
Action requise : Apply updates per vendor instructions.
Description
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCuo17183, CSCvd73487.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 8.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 8.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 8.3 Élevée | nvd@nist.gov (NVD) | AV:A/AC:L/Au:N/C:C/I:C/A:C |
Faiblesses (CWE)
Références
- http://www.securityfocus.com/bid/103564 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040586 Broken LinkThird Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03 Third Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 Third Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05 Third Party AdvisoryUS Government Resource
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp Vendor Advisory
- http://www.securityfocus.com/bid/103564 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040586 Broken LinkThird Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03 Third Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 Third Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05 Third Party AdvisoryUS Government Resource
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0167 US Government Resource