CVE-2016-1344

First published: Sat Mar 26 2016(Updated: )

The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets, aka Bug ID CSCux38417.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco IOS XE	=3.3s_3.3.0s
Cisco IOS XE	=3.3s_3.3.1s
Cisco IOS XE	=3.3s_3.3.2s
Cisco IOS XE	=3.3sg_3.3.0sg
Cisco IOS XE	=3.3sg_3.3.1sg
Cisco IOS XE	=3.3sg_3.3.2sg
Cisco IOS XE	=3.3xo_3.3.0xo
Cisco IOS XE	=3.3xo_3.3.1xo
Cisco IOS XE	=3.3xo_3.3.2xo
Cisco IOS XE	=3.4s_3.4.0as
Cisco IOS XE	=3.4s_3.4.0s
Cisco IOS XE	=3.4s_3.4.1s
Cisco IOS XE	=3.4s_3.4.2s
Cisco IOS XE	=3.4s_3.4.3s
Cisco IOS XE	=3.4s_3.4.4s
Cisco IOS XE	=3.4s_3.4.5s
Cisco IOS XE	=3.4s_3.4.6s
Cisco IOS XE	=3.4sg_3.4.0sg
Cisco IOS XE	=3.4sg_3.4.1sg
Cisco IOS XE	=3.4sg_3.4.2sg
Cisco IOS XE	=3.4sg_3.4.3sg
Cisco IOS XE	=3.4sg_3.4.4sg
Cisco IOS XE	=3.4sg_3.4.5sg
Cisco IOS XE	=3.4sg_3.4.6sg
Cisco IOS XE	=3.4sg_3.4.7sg
Cisco IOS XE	=3.5e_3.5.0e
Cisco IOS XE	=3.5e_3.5.1e
Cisco IOS XE	=3.5e_3.5.2e
Cisco IOS XE	=3.5e_3.5.3e
Cisco IOS XE	=3.5s_3.5.0s
Cisco IOS XE	=3.5s_3.5.1s
Cisco IOS XE	=3.5s_3.5.2s
Cisco IOS XE	=3.6e_3.6.0e
Cisco IOS XE	=3.6e_3.6.1e
Cisco IOS XE	=3.6e_3.6.2ae
Cisco IOS XE	=3.6e_3.6.2e
Cisco IOS XE	=3.6e_3.6.3e
Cisco IOS XE	=3.6s_3.6.0s
Cisco IOS XE	=3.6s_3.6.1s
Cisco IOS XE	=3.6s_3.6.2s
Cisco IOS XE	=3.7e_3.7.0e
Cisco IOS XE	=3.7e_3.7.1e
Cisco IOS XE	=3.7e_3.7.2e
Cisco IOS XE	=3.7e_3.7.3e
Cisco IOS XE	=3.7s_3.7.0s
Cisco IOS XE	=3.7s_3.7.1s
Cisco IOS XE	=3.7s_3.7.2s
Cisco IOS XE	=3.7s_3.7.2ts
Cisco IOS XE	=3.7s_3.7.3s
Cisco IOS XE	=3.7s_3.7.4as
Cisco IOS XE	=3.7s_3.7.4s
Cisco IOS XE	=3.7s_3.7.5s
Cisco IOS XE	=3.7s_3.7.6s
Cisco IOS XE	=3.7s_3.7.7s
Cisco IOS XE	=3.8e_3.8.0e
Cisco IOS XE	=3.8e_3.8.1e
Cisco IOS XE	=3.8s_3.8.0s
Cisco IOS XE	=3.8s_3.8.1s
Cisco IOS XE	=3.8s_3.8.2s
Cisco IOS XE	=3.9s_3.9.0as
Cisco IOS XE	=3.9s_3.9.0s
Cisco IOS XE	=3.9s_3.9.1as
Cisco IOS XE	=3.9s_3.9.1s
Cisco IOS XE	=3.9s_3.9.2s
Cisco IOS XE	=3.10s_3.10.0s
Cisco IOS XE	=3.10s_3.10.1s
Cisco IOS XE	=3.10s_3.10.1xbs
Cisco IOS XE	=3.10s_3.10.2s
Cisco IOS XE	=3.10s_3.10.3s
Cisco IOS XE	=3.10s_3.10.4s
Cisco IOS XE	=3.10s_3.10.5s
Cisco IOS XE	=3.10s_3.10.6s
Cisco IOS XE	=3.11s_3.11.0s
Cisco IOS XE	=3.11s_3.11.1s
Cisco IOS XE	=3.11s_3.11.2s
Cisco IOS XE	=3.11s_3.11.3s
Cisco IOS XE	=3.11s_3.11.4s
Cisco IOS XE	=3.12s_3.12.0s
Cisco IOS XE	=3.12s_3.12.1s
Cisco IOS XE	=3.12s_3.12.2s
Cisco IOS XE	=3.12s_3.12.3s
Cisco IOS XE	=3.12s_3.12.4s
Cisco IOS XE	=3.13s_3.13.0as
Cisco IOS XE	=3.13s_3.13.0s
Cisco IOS XE	=3.13s_3.13.1s
Cisco IOS XE	=3.13s_3.13.2as
Cisco IOS XE	=3.13s_3.13.2s
Cisco IOS XE	=3.13s_3.13.3s
Cisco IOS XE	=3.13s_3.13.4s
Cisco IOS XE	=3.14s_3.14.0s
Cisco IOS XE	=3.14s_3.14.1s
Cisco IOS XE	=3.14s_3.14.2s
Cisco IOS XE	=3.14s_3.14.3s
Cisco IOS XE	=3.15s_3.15.0s
Cisco IOS XE	=3.15s_3.15.1cs
Cisco IOS XE	=3.15s_3.15.1s
Cisco IOS XE	=3.15s_3.15.2s
Cisco IOS XE	=3.16s_3.16.0cs
Cisco IOS XE	=3.16s_3.16.0s
Cisco IOS XE	=3.16s_3.16.1as
Cisco IOS XE	=3.16s_3.16.1s
Cisco IOS XE	=3.17s_3.17.0s
Lenovo Thinkcentre E75s Firmware	<m16kt61a
Netgear Jr6150 Firmware	<2017-01-06
Samsung X14j Firmware	=t-ms14jakucb-1102.5
Sun OpenSolaris	=snv_124
Zyxel GS1900-10HP firmware	<2.50\(aazi.0\)c0
Zzinc Keymouse Firmware	=3.08

Never miss a vulnerability like this again

Reference Links

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/author
agent/weakness
agent/references
agent/severity
agent/last-modified-date
agent/tags
agent/description
agent/event
agent/first-publish-date
collector/nvd-index
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco ios xe
version/cisco ios xe/3.3s_3.3.0s
version/cisco ios xe/3.3s_3.3.1s
version/cisco ios xe/3.3s_3.3.2s
version/cisco ios xe/3.3sg_3.3.0sg
version/cisco ios xe/3.3sg_3.3.1sg
version/cisco ios xe/3.3sg_3.3.2sg
version/cisco ios xe/3.3xo_3.3.0xo
version/cisco ios xe/3.3xo_3.3.1xo
version/cisco ios xe/3.3xo_3.3.2xo
version/cisco ios xe/3.4s_3.4.0as
version/cisco ios xe/3.4s_3.4.0s
version/cisco ios xe/3.4s_3.4.1s
version/cisco ios xe/3.4s_3.4.2s
version/cisco ios xe/3.4s_3.4.3s
version/cisco ios xe/3.4s_3.4.4s
version/cisco ios xe/3.4s_3.4.5s
version/cisco ios xe/3.4s_3.4.6s
version/cisco ios xe/3.4sg_3.4.0sg
version/cisco ios xe/3.4sg_3.4.1sg
version/cisco ios xe/3.4sg_3.4.2sg
version/cisco ios xe/3.4sg_3.4.3sg
version/cisco ios xe/3.4sg_3.4.4sg
version/cisco ios xe/3.4sg_3.4.5sg
version/cisco ios xe/3.4sg_3.4.6sg
version/cisco ios xe/3.4sg_3.4.7sg
version/cisco ios xe/3.5e_3.5.0e
version/cisco ios xe/3.5e_3.5.1e
version/cisco ios xe/3.5e_3.5.2e
version/cisco ios xe/3.5e_3.5.3e
version/cisco ios xe/3.5s_3.5.0s
version/cisco ios xe/3.5s_3.5.1s
version/cisco ios xe/3.5s_3.5.2s
version/cisco ios xe/3.6e_3.6.0e
version/cisco ios xe/3.6e_3.6.1e
version/cisco ios xe/3.6e_3.6.2ae
version/cisco ios xe/3.6e_3.6.2e
version/cisco ios xe/3.6e_3.6.3e
version/cisco ios xe/3.6s_3.6.0s
version/cisco ios xe/3.6s_3.6.1s
version/cisco ios xe/3.6s_3.6.2s
version/cisco ios xe/3.7e_3.7.0e
version/cisco ios xe/3.7e_3.7.1e
version/cisco ios xe/3.7e_3.7.2e
version/cisco ios xe/3.7e_3.7.3e
version/cisco ios xe/3.7s_3.7.0s
version/cisco ios xe/3.7s_3.7.1s
version/cisco ios xe/3.7s_3.7.2s
version/cisco ios xe/3.7s_3.7.2ts
version/cisco ios xe/3.7s_3.7.3s
version/cisco ios xe/3.7s_3.7.4as
version/cisco ios xe/3.7s_3.7.4s
version/cisco ios xe/3.7s_3.7.5s
version/cisco ios xe/3.7s_3.7.6s
version/cisco ios xe/3.7s_3.7.7s
version/cisco ios xe/3.8e_3.8.0e
version/cisco ios xe/3.8e_3.8.1e
version/cisco ios xe/3.8s_3.8.0s
version/cisco ios xe/3.8s_3.8.1s
version/cisco ios xe/3.8s_3.8.2s
version/cisco ios xe/3.9s_3.9.0as
version/cisco ios xe/3.9s_3.9.0s
version/cisco ios xe/3.9s_3.9.1as
version/cisco ios xe/3.9s_3.9.1s
version/cisco ios xe/3.9s_3.9.2s
version/cisco ios xe/3.10s_3.10.0s
version/cisco ios xe/3.10s_3.10.1s
version/cisco ios xe/3.10s_3.10.1xbs
version/cisco ios xe/3.10s_3.10.2s
version/cisco ios xe/3.10s_3.10.3s
version/cisco ios xe/3.10s_3.10.4s
version/cisco ios xe/3.10s_3.10.5s
version/cisco ios xe/3.10s_3.10.6s
version/cisco ios xe/3.11s_3.11.0s
version/cisco ios xe/3.11s_3.11.1s
version/cisco ios xe/3.11s_3.11.2s
version/cisco ios xe/3.11s_3.11.3s
version/cisco ios xe/3.11s_3.11.4s
version/cisco ios xe/3.12s_3.12.0s
version/cisco ios xe/3.12s_3.12.1s
version/cisco ios xe/3.12s_3.12.2s
version/cisco ios xe/3.12s_3.12.3s
version/cisco ios xe/3.12s_3.12.4s
version/cisco ios xe/3.13s_3.13.0as
version/cisco ios xe/3.13s_3.13.0s
version/cisco ios xe/3.13s_3.13.1s
version/cisco ios xe/3.13s_3.13.2as
version/cisco ios xe/3.13s_3.13.2s
version/cisco ios xe/3.13s_3.13.3s
version/cisco ios xe/3.13s_3.13.4s
version/cisco ios xe/3.14s_3.14.0s
version/cisco ios xe/3.14s_3.14.1s
version/cisco ios xe/3.14s_3.14.2s
version/cisco ios xe/3.14s_3.14.3s
version/cisco ios xe/3.15s_3.15.0s
version/cisco ios xe/3.15s_3.15.1cs
version/cisco ios xe/3.15s_3.15.1s
version/cisco ios xe/3.15s_3.15.2s
version/cisco ios xe/3.16s_3.16.0cs
version/cisco ios xe/3.16s_3.16.0s
version/cisco ios xe/3.16s_3.16.1as
version/cisco ios xe/3.16s_3.16.1s
version/cisco ios xe/3.17s_3.17.0s
vendor/lenovo
canonical/lenovo thinkcentre e75s firmware
vendor/netgear
canonical/netgear jr6150 firmware
vendor/samsung
canonical/samsung x14j firmware
version/samsung x14j firmware/t-ms14jakucb-1102.5
vendor/sun
canonical/sun opensolaris
version/sun opensolaris/snv_124
vendor/zyxel
canonical/zyxel gs1900-10hp firmware
vendor/zzinc
canonical/zzinc keymouse firmware
version/zzinc keymouse firmware/3.08

CVE-2016-1344

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact