CVE-2016-6378
First published: Wed Oct 05 2016(Updated: )
Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets that require NAT, aka Bug ID CSCuw85853.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Software | =3.1.3s | |
| Cisco IOS XE Software | =3.1.4as | |
| Cisco IOS XE Software | =3.1.4s | |
| Cisco IOS XE Software | =3.2.1s | |
| Cisco IOS XE Software | =3.2.2s | |
| Cisco IOS XE Software | =3.3.0s | |
| Cisco IOS XE Software | =3.3.1s | |
| Cisco IOS XE Software | =3.3.2s | |
| Cisco IOS XE Software | =3.4.0s | |
| Cisco IOS XE Software | =3.4.1s | |
| Cisco IOS XE Software | =3.4.2s | |
| Cisco IOS XE Software | =3.4.3s | |
| Cisco IOS XE Software | =3.4.4s | |
| Cisco IOS XE Software | =3.4.5s | |
| Cisco IOS XE Software | =3.4.6s | |
| Cisco IOS XE Software | =3.5.0s | |
| Cisco IOS XE Software | =3.5.1s | |
| Cisco IOS XE Software | =3.5.2s | |
| Cisco IOS XE Software | =3.6.0s | |
| Cisco IOS XE Software | =3.6.1s | |
| Cisco IOS XE Software | =3.6.2s | |
| Cisco IOS XE Software | =3.7.0bs | |
| Cisco IOS XE Software | =3.7.0s | |
| Cisco IOS XE Software | =3.7.1s | |
| Cisco IOS XE Software | =3.7.2s | |
| Cisco IOS XE Software | =3.7.2ts | |
| Cisco IOS XE Software | =3.7.3s | |
| Cisco IOS XE Software | =3.7.4as | |
| Cisco IOS XE Software | =3.7.4s | |
| Cisco IOS XE Software | =3.7.5s | |
| Cisco IOS XE Software | =3.7.6s | |
| Cisco IOS XE Software | =3.7.7s | |
| Cisco IOS XE Software | =3.8.0s | |
| Cisco IOS XE Software | =3.8.1s | |
| Cisco IOS XE Software | =3.8.2s | |
| Cisco IOS XE Software | =3.9.0as | |
| Cisco IOS XE Software | =3.9.0s | |
| Cisco IOS XE Software | =3.9.1as | |
| Cisco IOS XE Software | =3.9.1s | |
| Cisco IOS XE Software | =3.9.2s | |
| Cisco IOS XE Software | =3.10.0s | |
| Cisco IOS XE Software | =3.10.1s | |
| Cisco IOS XE Software | =3.10.2s | |
| Cisco IOS XE Software | =3.10.2ts | |
| Cisco IOS XE Software | =3.10.3s | |
| Cisco IOS XE Software | =3.10.4s | |
| Cisco IOS XE Software | =3.10.5s | |
| Cisco IOS XE Software | =3.10.6s | |
| Cisco IOS XE Software | =3.11.0s | |
| Cisco IOS XE Software | =3.11.1s | |
| Cisco IOS XE Software | =3.11.2s | |
| Cisco IOS XE Software | =3.11.3s | |
| Cisco IOS XE Software | =3.11.4s | |
| Cisco IOS XE Software | =3.12.0as | |
| Cisco IOS XE Software | =3.12.0s | |
| Cisco IOS XE Software | =3.12.1s | |
| Cisco IOS XE Software | =3.12.2s | |
| Cisco IOS XE Software | =3.12.3s | |
| Cisco IOS XE Software | =3.12.4s | |
| Cisco IOS XE Software | =3.13.0as | |
| Cisco IOS XE Software | =3.13.0s | |
| Cisco IOS XE Software | =3.13.1s | |
| Cisco IOS XE Software | =3.13.2as | |
| Cisco IOS XE Software | =3.13.2s | |
| Cisco IOS XE Software | =3.13.3s | |
| Cisco IOS XE Software | =3.13.4s | |
| Cisco IOS XE Software | =3.14.0s | |
| Cisco IOS XE Software | =3.14.1s | |
| Cisco IOS XE Software | =3.14.2s | |
| Cisco IOS XE Software | =3.14.3s | |
| Cisco IOS XE Software | =3.15.0s | |
| Cisco IOS XE Software | =3.15.1cs | |
| Cisco IOS XE Software | =3.15.1s | |
| Cisco IOS XE Software | =3.15.2s | |
| Cisco IOS XE Software | =3.15.3s | |
| Cisco IOS XE Software | =3.16.0cs | |
| Cisco IOS XE Software | =3.16.0s | |
| Cisco IOS XE Software | =3.16.1as | |
| Cisco IOS XE Software | =3.16.1s | |
| Cisco IOS XE Software | =3.17.0s | |
| Cisco IOS XE Software | =16.1.3 | |
| Cisco IOS XE Software | =16.1.4 | |
| Cisco IOS XE Software | =16.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-6378?
CVE-2016-6378 has a severity rating that can lead to a denial of service due to device reloads from crafted ICMP packets.
How do I fix CVE-2016-6378?
To fix CVE-2016-6378, update to a patched version of Cisco IOS XE that addresses this vulnerability.
What versions of Cisco IOS XE are affected by CVE-2016-6378?
CVE-2016-6378 affects Cisco IOS XE versions 3.1 through 3.17 and 16.1 through 16.2.
What type of attack is possible with CVE-2016-6378?
An attacker can cause a denial of service by sending specially crafted ICMP packets to devices requiring NAT.
Is there a workaround for CVE-2016-6378?
Currently, there are no known workarounds for CVE-2016-6378 apart from upgrading to a secure version.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/last-modified-date
- agent/author
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/3.1.3s
- version/cisco ios xe/3.1.4as
- version/cisco ios xe/3.1.4s
- version/cisco ios xe/3.2.1s
- version/cisco ios xe/3.2.2s
- version/cisco ios xe/3.3.0s
- version/cisco ios xe/3.3.1s
- version/cisco ios xe/3.3.2s
- version/cisco ios xe/3.4.0s
- version/cisco ios xe/3.4.1s
- version/cisco ios xe/3.4.2s
- version/cisco ios xe/3.4.3s
- version/cisco ios xe/3.4.4s
- version/cisco ios xe/3.4.5s
- version/cisco ios xe/3.4.6s
- version/cisco ios xe/3.5.0s
- version/cisco ios xe/3.5.1s
- version/cisco ios xe/3.5.2s
- version/cisco ios xe/3.6.0s
- version/cisco ios xe/3.6.1s
- version/cisco ios xe/3.6.2s
- version/cisco ios xe/3.7.0bs
- version/cisco ios xe/3.7.0s
- version/cisco ios xe/3.7.1s
- version/cisco ios xe/3.7.2s
- version/cisco ios xe/3.7.2ts
- version/cisco ios xe/3.7.3s
- version/cisco ios xe/3.7.4as
- version/cisco ios xe/3.7.4s
- version/cisco ios xe/3.7.5s
- version/cisco ios xe/3.7.6s
- version/cisco ios xe/3.7.7s
- version/cisco ios xe/3.8.0s
- version/cisco ios xe/3.8.1s
- version/cisco ios xe/3.8.2s
- version/cisco ios xe/3.9.0as
- version/cisco ios xe/3.9.0s
- version/cisco ios xe/3.9.1as
- version/cisco ios xe/3.9.1s
- version/cisco ios xe/3.9.2s
- version/cisco ios xe/3.10.0s
- version/cisco ios xe/3.10.1s
- version/cisco ios xe/3.10.2s
- version/cisco ios xe/3.10.2ts
- version/cisco ios xe/3.10.3s
- version/cisco ios xe/3.10.4s
- version/cisco ios xe/3.10.5s
- version/cisco ios xe/3.10.6s
- version/cisco ios xe/3.11.0s
- version/cisco ios xe/3.11.1s
- version/cisco ios xe/3.11.2s
- version/cisco ios xe/3.11.3s
- version/cisco ios xe/3.11.4s
- version/cisco ios xe/3.12.0as
- version/cisco ios xe/3.12.0s
- version/cisco ios xe/3.12.1s
- version/cisco ios xe/3.12.2s
- version/cisco ios xe/3.12.3s
- version/cisco ios xe/3.12.4s
- version/cisco ios xe/3.13.0as
- version/cisco ios xe/3.13.0s
- version/cisco ios xe/3.13.1s
- version/cisco ios xe/3.13.2as
- version/cisco ios xe/3.13.2s
- version/cisco ios xe/3.13.3s
- version/cisco ios xe/3.13.4s
- version/cisco ios xe/3.14.0s
- version/cisco ios xe/3.14.1s
- version/cisco ios xe/3.14.2s
- version/cisco ios xe/3.14.3s
- version/cisco ios xe/3.15.0s
- version/cisco ios xe/3.15.1cs
- version/cisco ios xe/3.15.1s
- version/cisco ios xe/3.15.2s
- version/cisco ios xe/3.15.3s
- version/cisco ios xe/3.16.0cs
- version/cisco ios xe/3.16.0s
- version/cisco ios xe/3.16.1as
- version/cisco ios xe/3.16.1s
- version/cisco ios xe/3.17.0s
- version/cisco ios xe/16.1.3
- version/cisco ios xe/16.1.4
- version/cisco ios xe/16.2.1