CVE-2016-6382: High severity cisco ios vulnerability
Published Oct 5, 2016
·Updated
Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent Multicast (PIM) register packet, aka Bug ID CSCuy16399.
Affected Software
169 affected components
cisco IOS=15.2\(1\)sy
cisco IOS=15.2\(1\)sy0a
cisco IOS=15.2\(1\)sy1
cisco IOS=15.2\(1\)sy1a
cisco IOS=15.2\(2\)e
cisco IOS=15.2\(2\)e1
cisco IOS=15.2\(2\)e2
cisco IOS=15.2\(2\)e4
cisco IOS=15.2\(2\)ea1
cisco IOS=15.2\(2\)ea2
cisco IOS=15.2\(2\)ea3
cisco IOS=15.2\(2\)eb
cisco IOS=15.2\(2\)eb1
cisco IOS=15.2\(2\)eb2
cisco IOS=15.2\(2\)sy
cisco IOS=15.2\(2\)sy1
cisco IOS=15.2\(2a\)e1
cisco IOS=15.2\(3\)e
cisco IOS=15.2\(3\)e1
cisco IOS=15.2\(3\)e2
cisco IOS=15.2\(3\)e3
cisco IOS=15.2\(3\)ea
cisco IOS=15.2\(3a\)e
cisco IOS=15.2\(3m\)e2
cisco IOS=15.2\(4\)e
cisco IOS=15.2\(4\)e1
cisco IOS=15.2\(4\)ea
cisco IOS=15.2\(4\)ea1
cisco IOS=15.2\(4\)ea3
cisco IOS=15.2\(4m\)e1
cisco IOS=15.3\(1\)sy
cisco IOS=15.3\(3\)s
cisco IOS=15.3\(3\)s1
cisco IOS=15.3\(3\)s1a
cisco IOS=15.3\(3\)s2
cisco IOS=15.3\(3\)s3
cisco IOS=15.3\(3\)s4
cisco IOS=15.3\(3\)s5
cisco IOS=15.3\(3\)s6
cisco IOS=15.3\(3\)s7
cisco IOS=15.4\(1\)cg
cisco IOS=15.4\(1\)cg1
cisco IOS=15.4\(1\)s
cisco IOS=15.4\(1\)s1
cisco IOS=15.4\(1\)s2
cisco IOS=15.4\(1\)s3
cisco IOS=15.4\(1\)s4
cisco IOS=15.4\(1\)t
cisco IOS=15.4\(1\)t1
cisco IOS=15.4\(1\)t2
cisco IOS=15.4\(1\)t3
cisco IOS=15.4\(1\)t4
cisco IOS=15.4\(2\)cg
cisco IOS=15.4\(2\)s
cisco IOS=15.4\(2\)s1
cisco IOS=15.4\(2\)s2
cisco IOS=15.4\(2\)s3
cisco IOS=15.4\(2\)s4
cisco IOS=15.4\(2\)t
cisco IOS=15.4\(2\)t1
cisco IOS=15.4\(2\)t2
cisco IOS=15.4\(2\)t3
cisco IOS=15.4\(2\)t4
cisco IOS=15.4\(3\)m
cisco IOS=15.4\(3\)m1
cisco IOS=15.4\(3\)m2
cisco IOS=15.4\(3\)m3
cisco IOS=15.4\(3\)m4
cisco IOS=15.4\(3\)m5
cisco IOS=15.4\(3\)s
cisco IOS=15.4\(3\)s1
cisco IOS=15.4\(3\)s2
cisco IOS=15.4\(3\)s3
cisco IOS=15.4\(3\)s4
cisco IOS=15.4\(3\)s5
cisco IOS=15.5\(1\)s
cisco IOS=15.5\(1\)s1
cisco IOS=15.5\(1\)s2
cisco IOS=15.5\(1\)s3
cisco IOS=15.5\(1\)t
cisco IOS=15.5\(1\)t1
cisco IOS=15.5\(1\)t2
cisco IOS=15.5\(1\)t3
cisco IOS=15.5\(1\)t4
cisco IOS=15.5\(2\)s
cisco IOS=15.5\(2\)s1
cisco IOS=15.5\(2\)s2
cisco IOS=15.5\(2\)t
cisco IOS=15.5\(2\)t1
cisco IOS=15.5\(2\)t2
cisco IOS=15.5\(2\)t3
cisco IOS=15.5\(3\)m
cisco IOS=15.5\(3\)m0a
cisco IOS=15.5\(3\)m1
cisco IOS=15.5\(3\)m2
cisco IOS=15.5\(3\)s
cisco IOS=15.5\(3\)s0a
cisco IOS=15.5\(3\)s1
cisco IOS=15.5\(3\)s1a
cisco IOS=15.5\(3\)s2
cisco IOS=15.5\(3\)sn
cisco IOS=15.6\(1\)s
cisco IOS=15.6\(1\)s1
cisco IOS=15.6\(1\)t
cisco IOS=15.6\(1\)t0a
cisco IOS=15.6\(1\)t1
cisco IOS=15.6\(2\)t
Cisco IOS XE=3.6.0e
Cisco IOS XE=3.6.1e
Cisco IOS XE=3.6.2ae
Cisco IOS XE=3.6.2e
Cisco IOS XE=3.6.3e
Cisco IOS XE=3.6.4e
Cisco IOS XE=3.7.0e
Cisco IOS XE=3.7.1e
Cisco IOS XE=3.7.2e
Cisco IOS XE=3.7.3e
Cisco IOS XE=3.8.0e
Cisco IOS XE=3.8.1e
Cisco IOS XE=3.10.0s
Cisco IOS XE=3.10.1s
Cisco IOS XE=3.10.1xbs
Cisco IOS XE=3.10.2s
Cisco IOS XE=3.10.2ts
Cisco IOS XE=3.10.3s
Cisco IOS XE=3.10.4s
Cisco IOS XE=3.10.5s
Cisco IOS XE=3.10.6s
Cisco IOS XE=3.10.7s
Cisco IOS XE=3.11.0s
Cisco IOS XE=3.11.1s
Cisco IOS XE=3.11.2s
Cisco IOS XE=3.11.3s
Cisco IOS XE=3.11.4s
Cisco IOS XE=3.12.0as
Cisco IOS XE=3.12.0s
Cisco IOS XE=3.12.1s
Cisco IOS XE=3.12.2s
Cisco IOS XE=3.12.3s
Cisco IOS XE=3.12.4s
Cisco IOS XE=3.13.0as
Cisco IOS XE=3.13.0s
Cisco IOS XE=3.13.1s
Cisco IOS XE=3.13.2as
Cisco IOS XE=3.13.2s
Cisco IOS XE=3.13.3s
Cisco IOS XE=3.13.4s
Cisco IOS XE=3.13.5as
Cisco IOS XE=3.13.5s
Cisco IOS XE=3.14.0s
Cisco IOS XE=3.14.1s
Cisco IOS XE=3.14.2s
Cisco IOS XE=3.14.3s
Cisco IOS XE=3.15.0s
Cisco IOS XE=3.15.1cs
Cisco IOS XE=3.15.1s
Cisco IOS XE=3.15.2s
Cisco IOS XE=3.16.0cs
Cisco IOS XE=3.16.0s
Cisco IOS XE=3.16.1as
Cisco IOS XE=3.16.1s
Cisco IOS XE=3.16.2as
Cisco IOS XE=3.16.2bs
Cisco IOS XE=3.16.2s
Cisco IOS XE=3.17.0s
Cisco IOS XE=3.17.1as
Cisco IOS XE=3.17.1s
Cisco IOS XE=16.1.1
Cisco IOS XE=16.1.2
Event History
Oct 5, 2016
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6382?
CVE-2016-6382 has been classified as a high-severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2016-6382?
To mitigate CVE-2016-6382, update your Cisco IOS or IOS XE to a version that includes fixes for this vulnerability.
3
What types of devices are affected by CVE-2016-6382?
CVE-2016-6382 affects devices running Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1.
4
Can CVE-2016-6382 be exploited remotely?
Yes, CVE-2016-6382 can be exploited by remote attackers through a malformed IPv6 PIM register packet.
5
What impact does CVE-2016-6382 have on my network?
Exploiting CVE-2016-6382 can result in a denial of service condition causing the affected device to restart.