cisco-sa-20180620-nxosbgp: Cisco NX-OS Software Border Gateway Protocol Denial of Service Vulnerability

First published: Wed Jun 20 2018(Updated: )

A vulnerability in the Border Gateway Protocol (BGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP update messages. An attacker could exploit this vulnerability by sending a crafted BGP update message to the targeted device. An exploit could allow the attacker to cause the switch to reload unexpectedly. The Cisco implementation of the BGP protocol only accepts incoming BGP traffic from explicitly defined peers. To exploit this vulnerability, an attacker must be able to send the malicious packets over a TCP connection that appears to come from a trusted BGP peer or inject malformed messages into the victim's BGP network. This would require obtaining information about the BGP peers in the affected system's trusted network. The vulnerability may be triggered when the router receives a malformed BGP message from a peer on an existing BGP session. At least one BGP neighbor session must be established for a router to be vulnerable. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nxosbgp This advisory is part of the June 2018 Cisco FXOS and NX-OS Software Security Advisory Collection, which includes 24 Cisco Security Advisories that describe 24 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: June 2018 Cisco FXOS and NX-OS Software Security Advisory Collection.

Credit: This vulnerability was found during resolution a TAC support case

Affected Software	Affected Version	How to fix
Cisco NX-OS Software
Cisco NX-OS Software	=6.2<6.2(20)	6.2(20)
Cisco NX-OS Software	=13.0/3.0<13.0(1k)/3.0(1k)=12.3/2.3<13.0(1k)/3.0(1k)=12.2/2.2<12.2(3j)/2.2(3j)=12.1/2.1<12.1(3h)/2.1(3h)=Prior to 12.1/2.1<12.1(3h)/2.1(3h)	13.0(1k)/3.0(1k) 13.0(1k)/3.0(1k) 12.2(3j)/2.2(3j) 12.1(3h)/2.1(3h) 12.1(3h)/2.1(3h)

Never miss a vulnerability like this again

Reference Links

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nxosbgp (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

CVE-2018-0295

agent/title
agent/weakness
agent/severity
agent/references
agent/author
agent/type
agent/event
agent/description
agent/first-publish-date
agent/softwarecombine
agent/last-modified-date
agent/tags
collector/cisco-advisory
source/Cisco
agent/software-canonical-lookup
vendor/cisco
canonical/cisco nx-os software
version/cisco nx-os software/6.2
version/cisco nx-os software/13.0/3.0
version/cisco nx-os software/12.3/2.3
version/cisco nx-os software/12.2/2.2
version/cisco nx-os software/12.1/2.1
version/cisco nx-os software/prior to 12.1/2.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.