CVE-2017-3850 Denial of service in Cisco IOS and IOS XE
Unauthenticated remote attackers can cause a denial of service by sending crafted IPv6 packets to Cisco IOS devices with reachable IPv6 interfaces.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-3850?
CVE-2017-3850 is a medium-severity denial of service vulnerability in Cisco Ios, published on 21 Mar 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (3.7 through 3.18, and 16) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation on certain crafted packets. An attacker could exploit this vulnerability by sending a crafted IPv6 packet to a device that is running a Cisco IOS Software or Cisco IOS XE Software release that supports the ANI feature. A device must meet two conditions to be affected by this vulnerability: (1) the device must be running a version of Cisco IOS Software or Cisco IOS XE Software that supports ANI (regardless of whether ANI is configured); and (2) the device must have a reachable IPv6 interface. An exploit could allow the attacker to cause the affected device to reload. Cisco Bug IDs: CSCvc42729.
Weakness: CWE-20
Which versions are affected by CVE-2017-3850?
It affects 2 products.
Products include Cisco Ios, Cisco Ios Xe.
How do I fix CVE-2017-3850?
No fix has been published for CVE-2017-3850 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2017-3850 being exploited?
There is no known exploitation of CVE-2017-3850 in the wild and no public exploit code.
Other vulnerabilities in Cisco Ios
- CVE-2017-12240 Cisco IOS and IOS XE Software DHCP Remote Code Execution
- CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution
- CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow
- CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution
- CVE-2017-6737 Cisco IOS and IOS XE Software SNMP Remote Code Execution
Sources
Also known as GHSA-jhqw-56w5-968x.