CVE-2018-0418: Input Validation
A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services Router Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input and validation checking on certain Precision Time Protocol (PTP) ingress traffic to an affected device. An attacker could exploit this vulnerability by injecting malformed traffic into an affected device. A successful exploit could allow the attacker to cause services on the device to become unresponsive, resulting in a DoS condition. Cisco Bug IDs: CSCvj22858.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-0418.
What is the severity of CVE-2018-0418?
CVE-2018-0418 has a severity rating of high.
How can an attacker exploit CVE-2018-0418?
An attacker can exploit CVE-2018-0418 by sending specially crafted packets to an affected device, causing a denial of service condition.
Which software versions are affected by CVE-2018-0418?
Cisco IOS XR 6.3.3 base is affected by CVE-2018-0418.
How can I fix CVE-2018-0418?
To fix CVE-2018-0418, it is recommended to upgrade to a version of Cisco ASR 9000 Series Aggregation Services Router Software that includes the fix for this vulnerability.