CVE-2016-6466 Denial of service in Cisco StarOS 20.0.0 through 21.0.M0.64246
Unauthenticated remote attackers can terminate active IPsec VPN tunnels and block new connections on Cisco ASR routers, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-6466?
CVE-2016-6466 is a high-severity denial of service vulnerability in Cisco StarOS 20.0.0 through 21.0.M0.64246, published on 19 Nov 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service (DoS) condition. This vulnerability affects the following Cisco products: Cisco ASR 5000/5500 Series routers, Cisco Virtualized Packet Core (VPC). More Information: CSCva13631. Known Affected Releases: 20.0.0 20.1.0 20.2.0 20.2.3 20.2.v1 21.0.0 21.0.M0.64246. Known Fixed Releases: 20.2.3 20.2.3.65026 20.2.a4.65307 20.2.v1 20.2.v1.65353 20.3.M0.65037 20.3.T0.65043 21.0.0 21.0.0.65256 21.0.M0.64595 21.0.M0.64860 21.0.M0.65140 21.0.V0.65052 21.0.V0.65150 21.0.V0.65366 21.0.VC0.64639 21.1.A0.64861 21.1.A0.65145 21.1.PP0.65270 21.1.R0.65130 21.1.R0.65135 21.1.R0.65154 21.1.VC0.64898 21.1.VC0.65203 21.2.A0.65147.
Weakness: CWE-399
Which versions are affected by CVE-2016-6466?
It affects 2 products.
Products include Cisco Asr 5000 Series Software, Cisco Virtualized Packet Core.
How do I fix CVE-2016-6466?
No fix has been published for CVE-2016-6466 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2016-6466 being exploited?
There is no known exploitation of CVE-2016-6466 in the wild and no public exploit code.
Other vulnerabilities in Cisco StarOS 20.0.0 through 21.0.M0.64246
- CVE-2017-3819 Privilege escalation in Cisco StarOS
- CVE-2017-6612 Open redirect in Cisco ASR 5000 Series Aggregation Services Routers
- CVE-2017-6672 Security feature bypass in Cisco ASR 5000 Series Aggregation Services Routers
- CVE-2016-6467 Denial of service in Cisco Aggregation Services Router (ASR) 5000 Series Switch
- CVE-2016-9203 Denial of service in Cisco ASR 5000
Sources
Also known as GHSA-jwp5-v2vg-6xxj.