CVE-2017-6613: Input Validation
First published: Thu Apr 20 2017(Updated: )
A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause the DNS process to momentarily restart, which could lead to a partial denial of service (DoS) condition on the affected system. The vulnerability is due to incomplete DNS packet header validation when the packet is received by the application. An attacker could exploit this vulnerability by sending a malformed DNS packet to the application. An exploit could allow the attacker to cause the DNS process to restart, which could lead to a DoS condition. This vulnerability affects Cisco Prime Network Registrar on all software versions prior to 8.3.5. Cisco Bug IDs: CSCvb55412.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Prime Network Registrar Major | =8.3.0 | |
| Cisco Prime Network Registrar Major | =8.3.1 | |
| Cisco Prime Network Registrar Major | =8.3.2 | |
| Cisco Prime Network Registrar Major | =8.3.3 | |
| Cisco Prime Network Registrar Major | =8.3.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-6613?
CVE-2017-6613 has been classified as a medium severity vulnerability.
How do I fix CVE-2017-6613?
To fix CVE-2017-6613, upgrade Cisco Prime Network Registrar to version 8.3.5 or later.
What are the potential impacts of exploiting CVE-2017-6613?
Exploiting CVE-2017-6613 could lead to a partial denial of service condition due to DNS process interruptions.
Is CVE-2017-6613 exploitable remotely?
Yes, CVE-2017-6613 can be exploited by an unauthenticated remote attacker.
Which software versions are affected by CVE-2017-6613?
CVE-2017-6613 affects Cisco Prime Network Registrar versions 8.3.0 to 8.3.4.
- agent/severity
- agent/description
- agent/tags
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/author
- agent/weakness
- agent/references
- vendor/cisco
- canonical/cisco prime network registrar major
- version/cisco prime network registrar major/8.3.0
- version/cisco prime network registrar major/8.3.1
- version/cisco prime network registrar major/8.3.2
- version/cisco prime network registrar major/8.3.3
- version/cisco prime network registrar major/8.3.4