CVE-2017-3863 Memory corruption in Cisco IOS and IOS XE
Unauthenticated remote attackers can cause denial of service via buffer overflow in EnergyWise module on Cisco IOS devices configured as domain members.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-3863?
CVE-2017-3863 is a high-severity memory corruption vulnerability in Cisco Ios, published on 20 Apr 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and Cisco IOS XE (3.2 through 3.18) could allow an unauthenticated, remote attacker to cause a buffer overflow condition or a reload of an affected device, leading to a denial of service (DoS) condition. These vulnerabilities are due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit these vulnerabilities by sending crafted EnergyWise packets to be processed by an affected device. An exploit could allow the attacker to cause a buffer overflow condition or a reload of the affected device, leading to a DoS condition. Cisco IOS Software and Cisco IOS XE Software support EnergyWise for IPv4 communication. Only IPv4 packets destined to a device configured as an EnergyWise domain member can trigger these vulnerabilities. IPv6 packets cannot be used to trigger these vulnerabilities. Cisco Bug ID CSCut50727.
Weakness: CWE-119
Which versions are affected by CVE-2017-3863?
It affects 2 products.
Products include Cisco Ios, Cisco Ios Xe.
How do I fix CVE-2017-3863?
No fix has been published for CVE-2017-3863 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-3863 being exploited?
There is no known exploitation of CVE-2017-3863 in the wild and no public exploit code.
Other vulnerabilities in Cisco Ios
- CVE-2017-12240 Cisco IOS and IOS XE Software DHCP Remote Code Execution
- CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution
- CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow
- CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution
- CVE-2017-6737 Cisco IOS and IOS XE Software SNMP Remote Code Execution
Sources
Also known as GHSA-wr48-m8vq-hpjp.