CVE-2018-0172: Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
First published: Wed Mar 28 2018(Updated: )
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of option 82 information that it receives in DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device. A successful exploit could allow the attacker to cause a heap overflow condition on the affected device, which will cause the device to reload and result in a DoS condition. Cisco Bug IDs: CSCvg62730.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS | ||
| Cisco IOS XE | ||
| Rockwellautomation Allen-bradley Armorstratix 5700 | ||
| Rockwellautomation Allen-bradley Stratix 5400 | ||
| Rockwellautomation Allen-bradley Stratix 5410 | ||
| Rockwellautomation Allen-bradley Stratix 5700 | ||
| Rockwellautomation Allen-bradley Stratix 8000 | ||
| Rockwellautomation Allen-bradley Stratix 8300 | ||
| Cisco IOS and IOS XE Software | ||
| All of | ||
| Any of | ||
| Cisco IOS | ||
| Cisco IOS XE | ||
| Any of | ||
| Rockwellautomation Allen-bradley Armorstratix 5700 | ||
| Rockwellautomation Allen-bradley Stratix 5400 | ||
| Rockwellautomation Allen-bradley Stratix 5410 | ||
| Rockwellautomation Allen-bradley Stratix 5700 | ||
| Rockwellautomation Allen-bradley Stratix 8000 | ||
| Rockwellautomation Allen-bradley Stratix 8300 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/103552
- http://www.securitytracker.com/id/1040591
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr1
- https://www.tenable.com/security/research/tra-2018-06
- https://nvd.nist.gov/vuln/detail/CVE-2018-0172
Frequently Asked Questions
What is CVE-2018-0172?
CVE-2018-0172 is a vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS and IOS XE Software that could allow an unauthenticated remote attacker to cause a denial of service (DoS) condition on an affected device.
What is the severity of CVE-2018-0172?
CVE-2018-0172 has a severity rating of 8.6/10, which is considered high.
How does CVE-2018-0172 affect Cisco IOS and IOS XE Software?
CVE-2018-0172 affects the DHCP option 82 encapsulation functionality of Cisco IOS and IOS XE Software, potentially allowing an attacker to cause a device to reload and result in a denial of service (DoS) condition.
How can I mitigate CVE-2018-0172 vulnerability?
To mitigate CVE-2018-0172, it is recommended to apply the necessary patches or updates provided by Cisco.
Where can I find more information about CVE-2018-0172?
More information about CVE-2018-0172 can be found on the following websites: [1] http://www.securityfocus.com/bid/103552, [2] http://www.securitytracker.com/id/1040591, [3] https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04.
- agent/type
- agent/description
- agent/author
- agent/weakness
- agent/title
- agent/severity
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-cve
- source/NVD
- vendor/cisco
- canonical/cisco ios
- canonical/cisco ios xe
- vendor/rockwellautomation
- canonical/rockwellautomation allen-bradley armorstratix 5700
- canonical/rockwellautomation allen-bradley stratix 5400
- canonical/rockwellautomation allen-bradley stratix 5410
- canonical/rockwellautomation allen-bradley stratix 5700
- canonical/rockwellautomation allen-bradley stratix 8000
- canonical/rockwellautomation allen-bradley stratix 8300
- canonical/cisco ios and ios xe software