CVE-2016-9203: Buffer Overflow
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases: 21.1.M0.65431 21.1.PP0.65733 21.1.R0.65467 21.1.R0.65496 21.1.VC0.65434 21.1.VC0.65489 21.2.A0.65437.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9203?
CVE-2016-9203 is considered a high severity vulnerability due to its potential to allow remote attackers to reload the ipsecmgr process without authentication.
How do I fix CVE-2016-9203?
To fix CVE-2016-9203, upgrade to a fixed release of the Cisco ASR 5000 Series Software, such as version 21.1.M or later.
What systems are affected by CVE-2016-9203?
CVE-2016-9203 affects Cisco ASR 5000 Series Software versions 20.2.3 and 20.2.3.65026.
What impact does CVE-2016-9203 have on my system?
CVE-2016-9203 can cause a denial of service by reloading the ipsecmgr process, leading to temporary network disruptions.
Is there a workaround for CVE-2016-9203?
There is no documented workaround for CVE-2016-9203, so it is recommended to apply the appropriate software patch.