CVE-2018-0151 Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution
Remote attackers can trigger a buffer overflow in the QoS subsystem to execute arbitrary code or cause a denial of service on Cisco IOS devices.
- Exploited in the wild
- Since 3 Mar 2022
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-0151?
CVE-2018-0151 is a critical memory corruption vulnerability in Cisco Ios Xe, published on 28 Mar 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges. The vulnerability is due to incorrect bounds checking of certain values in packets that are destined for UDP port 18999 of an affected device. An attacker could exploit this vulnerability by sending malicious packets to an affected device. When the packets are processed, an exploitable buffer overflow condition may occur. A successful exploit could allow the attacker to execute arbitrary code on the affected device with elevated privileges. The attacker could also leverage this vulnerability to cause the device to reload, causing a temporary DoS condition while the device is reloading. The malicious packets must be destined to and processed by an affected device. Traffic transiting a device will not trigger the vulnerability. Cisco Bug IDs: CSCvf73881.
Weakness: CWE-119
Which versions are affected by CVE-2018-0151?
It affects 1 product.
Products include Cisco Ios Xe.
How do I fix CVE-2018-0151?
No fix has been published for CVE-2018-0151 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 17 Mar 2022.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-0151 being exploited?
Yes. Attackers have exploited CVE-2018-0151 in the wild since at least 3 Mar 2022.
Other vulnerabilities in Cisco Ios Xe
- CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation
- CVE-2023-20273 Cisco IOS XE Web UI Command Injection
- CVE-2025-20188 Hardcoded credentials in Cisco IOS XE Software
- CVE-2021-34770 Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability
- CVE-2019-12643 Cisco REST API Container for IOS XE Software Authentication Bypass Vulnerability
Sources
Also known as GHSA-mpwr-vh8m-qpfg.