CVE-2018-0252: Buffer Overflow
First published: Wed May 02 2018(Updated: )
A vulnerability in the IP Version 4 (IPv4) fragment reassembly function of Cisco 3500, 5500, and 8500 Series Wireless LAN Controller Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. The vulnerability is due to a corruption of an internal data structure process that occurs when the affected software reassembles certain IPv4 packets. An attacker could exploit this vulnerability by sending certain malformed IPv4 fragments to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. This vulnerability affects all releases of 8.4 until the first fixed release for the 5500 and 8500 Series Wireless LAN Controllers and releases 8.5.103.0 and 8.5.105.0 for the 3500, 5500, and 8500 Series Wireless LAN Controllers. Cisco Bug IDs: CSCvf89222.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless LAN Controller Software | =8.4\(100.0\) | |
| Cisco Wireless LAN Controller Software | =8.5\(107.30\) | |
| Cisco Wireless LAN Controller Software | =8.5\(107.41\) | |
| Cisco Wireless LAN Controller Software | =8.6\(1.108\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco Wireless LAN Controller Software vulnerability?
The vulnerability ID for this Cisco Wireless LAN Controller Software vulnerability is CVE-2018-0252.
What is the severity of CVE-2018-0252?
The severity of CVE-2018-0252 is high, with a severity value of 8.6.
What is the affected software?
The affected software is Cisco Wireless LAN Controller Software versions 8.4(100.0), 8.5(107.30), 8.5(107.41), and 8.6(1.108).
What is the impact of this vulnerability?
This vulnerability could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.
How can I fix CVE-2018-0252?
To fix CVE-2018-0252, it is recommended to upgrade to a patched version of Cisco Wireless LAN Controller Software.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco wireless lan controller software
- version/cisco wireless lan controller software/8.4\(100.0\)
- version/cisco wireless lan controller software/8.5\(107.30\)
- version/cisco wireless lan controller software/8.5\(107.41\)
- version/cisco wireless lan controller software/8.6\(1.108\)