cisco-sa-20180328-qos: Cisco IOS and IOS XE Software Quality of Service Remote Code Execution Vulnerability

Published Mar 28, 2018

Updated

This advisory is part of the March 28, 2018, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 20 Cisco Security Advisories that describe 22 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: March 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.

Affected Software

2 affected components

cisco IOS

Cisco IOS XE

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Remove
Remove Cisco IOS/IOS XE CoPP policy drop-udp from your environment.
If the Adaptive QoS for DMVPN feature is later configured, remove the CoPP policy.
Configuration
Configure an inbound CoPP policy that matches UDP traffic destined to port 18999 and drops it before processing, while denying IP fragments from classification. On platforms without the policy-map drop keyword, use police rate 8000 with conform-action drop, exceed-action drop, and violate-action drop.
Cisco IOS/IOS XE Control Plane Policing (CoPP) ACL 199 and policy-map drop-udp = deny IP fragments; permit UDP traffic to destination port 18999; match ACL 199 and drop it

Event History

Mar 28, 2018

Advisory Published

04:00 PM

Data Sourced

04:00 PM

RemedyDescriptionSeverityWeaknessAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2018-0151

Frequently Asked Questions

What is the severity of cisco-sa-20180328-qos?

The severity of cisco-sa-20180328-qos is classified as high due to the potential impact on network availability.

Which products are affected by cisco-sa-20180328-qos?

The products affected by cisco-sa-20180328-qos include Cisco IOS and Cisco IOS XE.

How do I fix cisco-sa-20180328-qos?

To fix cisco-sa-20180328-qos, upgrade to the recommended versions of Cisco IOS or IOS XE provided in the advisory.

What types of vulnerabilities are addressed in cisco-sa-20180328-qos?

cisco-sa-20180328-qos addresses multiple vulnerabilities that could allow for unauthorized actions and impact device performance.

Is there a patch available for cisco-sa-20180328-qos?

Yes, a patch is available and can be applied by upgrading to the secure versions specified in the Cisco advisory.