CVE-2018-0315: Buffer Overflow
First published: Thu Jun 07 2018(Updated: )
A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect memory operations that the affected software performs when the software parses a username during login authentication. An attacker could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device or cause the affected device to reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are running Cisco IOS XE Software Release Fuji 16.7.1 or Fuji 16.8.1 and are configured to use AAA for login authentication. Cisco Bug IDs: CSCvi25380.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Software | =16.7.1 | |
| Cisco IOS XE Software | =16.8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0315?
CVE-2018-0315 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2018-0315?
To fix CVE-2018-0315, upgrade affected Cisco IOS XE Software to a version not vulnerable to this issue.
What impact does CVE-2018-0315 have on affected devices?
CVE-2018-0315 can lead to arbitrary code execution or cause affected devices to reload, resulting in a denial of service.
Which versions of Cisco IOS XE are affected by CVE-2018-0315?
Cisco IOS XE versions 16.7.1 and 16.8.1 are specifically affected by CVE-2018-0315.
Is CVE-2018-0315 exploitable remotely?
Yes, CVE-2018-0315 is exploitable by an unauthenticated remote attacker.
- agent/type
- agent/references
- agent/author
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/16.7.1
- version/cisco ios xe/16.8.1