CVE-2018-0282 Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability

Medium 6.8 Published 10 Jan 2019 Updated 21 Nov 2024

Remote attackers can cause Cisco IOS devices to reload by sending specific HTTP requests, resulting in a denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-0282?

CVE-2018-0282 is a medium-severity denial of service vulnerability in Cisco Ios, published on 10 Jan 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state. While this vulnerability potentially affects all TCP applications, the only affected application observed so far is the HTTP server. An attacker could exploit this vulnerability by sending specific HTTP requests at a sustained rate to a reachable IP address of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition on an affected device.

Weakness: CWE-371

Which versions are affected by CVE-2018-0282?

It affects 2 products.

Products include Cisco Ios, Cisco Ios Xe.

How do I fix CVE-2018-0282?

No fix has been published for CVE-2018-0282 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2018-0282 being exploited?

There is no known exploitation of CVE-2018-0282 in the wild and no public exploit code.

All Cisco Ios vulnerabilities

Sources

Also known as GHSA-rp26-f635-9496.