cisco-sa-20180328-lldp: Cisco IOS, IOS XE, and IOS XR Software Link Layer Discovery Protocol Buffer Overflow Vulnerabilities
First published: Wed Mar 28 2018(Updated: )
Multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp This advisory is part of the March 28, 2018, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 20 Cisco Security Advisories that describe 22 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: March 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
Credit: These vulnerabilities were found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS | ||
| Cisco IOS XE Software | ||
| Cisco IOS XRv 9000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20180328-lldp?
The severity of cisco-sa-20180328-lldp is high due to the potential for denial of service or arbitrary code execution.
How do I fix cisco-sa-20180328-lldp?
To fix cisco-sa-20180328-lldp, apply the recommended software updates provided by Cisco for IOS, IOS XE, and IOS XR Software.
What vulnerabilities are associated with cisco-sa-20180328-lldp?
cisco-sa-20180328-lldp involves multiple vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem.
Can cisco-sa-20180328-lldp be exploited remotely?
cisco-sa-20180328-lldp requires an adjacent attacker to exploit the vulnerabilities, meaning it cannot be exploited remotely.
What types of devices are affected by cisco-sa-20180328-lldp?
Devices running Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software are affected by cisco-sa-20180328-lldp.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/references
- agent/author
- agent/weakness
- agent/title
- agent/severity
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios
- canonical/cisco ios xe software
- canonical/cisco ios xrv 9000