CVE-2017-3864 Denial of service in Cisco IOS and IOS XE

High 8.6 Published 22 Mar 2017 Updated 5 Aug 2024

Remote attackers can cause a device reload and denial of service by sending crafted DHCP packets to Cisco IOS devices configured as DHCP clients.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2017-3864?

CVE-2017-3864 is a high-severity denial of service vulnerability in Cisco Ios, published on 22 Mar 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability occurs during the parsing of a crafted DHCP packet. An attacker could exploit this vulnerability by sending crafted DHCP packets to an affected device that is configured as a DHCP client. A successful exploit could allow the attacker to cause a reload of an affected device, resulting in a DoS condition. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS or IOS XE Software and using a specific DHCP client configuration. Cisco Bug IDs: CSCuu43892.

Weakness: CWE-399

Which versions are affected by CVE-2017-3864?

It affects 2 products.

Products include Cisco Ios, Cisco Ios Xe.

How do I fix CVE-2017-3864?

No fix has been published for CVE-2017-3864 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2017-3864 being exploited?

There is no known exploitation of CVE-2017-3864 in the wild and no public exploit code.

All Cisco Ios vulnerabilities

Sources

Also known as GHSA-qj55-f9h6-mf7m.