CVE-2016-1361

Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows remote attackers to cause a denial of service (line-card restart) via a crafted packet, aka Bug ID CSCuw56900.

CVSS v3 5.3 MEDIUM
CVSS v2.0 4.6 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability : 1.6 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.6^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:A/AC:H/Au:N/C:N/I:N/A:C

Exploitability : 3.2 / Impact : 6.9

Access Vector ADJACENT_NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr	Vendor Advisory
http://www.securitytracker.com/id/1035314
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr	Vendor Advisory
http://www.securitytracker.com/id/1035314

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:ios_xr:3.3.3:::::::*
	cpe:2.3:o:cisco:ios_xr:3.4.1:::::::*
	cpe:2.3:o:cisco:ios_xr:3.4.2:::::::*
	cpe:2.3:o:cisco:ios_xr:3.4.3:::::::*
	cpe:2.3:o:cisco:ios_xr:3.5.2:::::::*
	cpe:2.3:o:cisco:ios_xr:3.5.3:::::::*
	cpe:2.3:o:cisco:ios_xr:3.5.4:::::::*
	cpe:2.3:o:cisco:ios_xr:3.6.0:::::::*
	cpe:2.3:o:cisco:ios_xr:3.6.1:::::::*
	cpe:2.3:o:cisco:ios_xr:3.6.2:::::::*
	cpe:2.3:o:cisco:ios_xr:3.6.3:::::::*
	cpe:2.3:o:cisco:ios_xr:3.7.0:::::::*
	cpe:2.3:o:cisco:ios_xr:3.7.1:::::::*
	cpe:2.3:o:cisco:ios_xr:3.8.0:::::::*
	cpe:2.3:o:cisco:ios_xr:3.8.1:::::::*
	cpe:2.3:o:cisco:ios_xr:3.8.2:::::::*
	cpe:2.3:o:cisco:ios_xr:3.8.4:::::::*
	cpe:2.3:o:cisco:ios_xr:3.9.0:::::::*
	cpe:2.3:o:cisco:ios_xr:3.9.1:::::::*
	cpe:2.3:o:cisco:ios_xr:3.9.2:::::::*
	cpe:2.3:o:cisco:ios_xr:4.0.0:::::::*
	cpe:2.3:o:cisco:ios_xr:4.0.1:::::::*
	cpe:2.3:o:cisco:ios_xr:4.0.3:::::::*
	cpe:2.3:o:cisco:ios_xr:4.1.0:::::::*
	cpe:2.3:o:cisco:ios_xr:4.1.1:::::::*
	cpe:2.3:o:cisco:ios_xr:4.1.2:::::::*
	cpe:2.3:o:cisco:ios_xr:4.2.0:::::::*
	cpe:2.3:o:cisco:ios_xr:4.2.1:::::::*
	cpe:2.3:o:cisco:ios_xr:4.2.2:::::::*
	cpe:2.3:o:cisco:ios_xr:4.2.3:::::::*
	cpe:2.3:o:cisco:ios_xr:4.2.4:::::::*
	cpe:2.3:o:cisco:ios_xr:4.3.0:::::::*
	cpe:2.3:o:cisco:ios_xr:4.3.1:::::::*
	cpe:2.3:o:cisco:ios_xr:4.3.2:::::::*

OR	cpe:2.3:h:cisco:xr_12404::::::::
	cpe:2.3:h:cisco:xr_12406::::::::
	cpe:2.3:h:cisco:xr_12410::::::::
	cpe:2.3:h:cisco:xr_12416::::::::

History

21 Nov 2024, 02:46

Type	Values Removed	Values Added
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr - Vendor Advisory~~	() http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr - Vendor Advisory
References	~~() http://www.securitytracker.com/id/1035314 -~~	() http://www.securitytracker.com/id/1035314 -

Information

Published : 2016-03-12 02:59

Updated : 2024-11-21 02:46

NVD link : CVE-2016-1361

Mitre link : CVE-2016-1361

CVE.ORG link : CVE-2016-1361

JSON object : View

Products Affected

cisco

xr_12404
ios_xr
xr_12410
xr_12416
xr_12406

CWE

CWE-399

Resource Management Errors

{"id": "CVE-2016-1361", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.2, "obtainUserPrivilege": false, "obtainOtherPrivilege": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "published": "2016-03-12T02:59:04.910", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1035314", "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id/1035314", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows remote attackers to cause a denial of service (line-card restart) via a crafted packet, aka Bug ID CSCuw56900."}, {"lang": "es", "value": "Cisco IOS XR hasta la versi\u00f3n 4.3.2 en dispositivos Gigabit Switch Router (GSR) 12000 no verifica adecuadamente para una cabecera Bidirectional Forwarding Detection (BFD) en un paquete UDP, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (reinicio de tarjeta en l\u00ednea) a trav\u00e9s de un paquete manipulado, tambi\u00e9n conocida como Bug ID CSCuw56900."}], "lastModified": "2024-11-21T02:46:15.380", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xr:3.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E1811B6-737F-407C-8AB0-63E6B031D5AD"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81797938-F953-42BE-B287-AA48B9860AF6"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "92AED038-C73F-4499-B064-F01D80DB0C64"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5F15240-6323-4766-801A-D887F3EA8A6B"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D99DC1CF-78DC-4E59-98BA-DD84702D6467"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B9FA754-E3D2-4D80-8F4B-41139973D9FC"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F497A05C-2FC5-427D-8036-2476ACA956C0"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1131A524-AA7A-4C94-9FFE-54546EA7D2CC"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46D1A634-D39C-4305-8915-4AA289FB68EE"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21BAB799-3150-46D8-AEA3-9FCC73203221"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99042285-94AC-4C57-8EAA-EE63C678A94A"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "96F48419-AF66-4B50-ACBF-9E38287A64FA"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBB71A24-AA6C-4BAD-BD37-5C191751C9DF"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A20B6A9-27B7-4F42-B88D-F4AACC9BC24D"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B9A223A-7A0A-4E31-B8A1-C809373A799D"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1ECAB9C3-9248-4663-ABAE-31FFC969EF3A"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "10596213-9D2B-48A3-A733-744D41E90419"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A07DCCD1-85D5-4ED2-B845-8C6EAC7E9D9B"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F57421B-F54C-4C50-8B25-AF787E541C5A"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A865225-6AEA-430D-8DB6-E70F7ED5E547"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39F8B336-0DFA-41CE-9EFF-89A09BBDC6D6"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BFD77AF-358B-4385-BA8E-1BE9AC166825"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E593EF3-133A-4E15-9B86-6B451F5C0159"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3BB49EB2-2D99-4C45-80B7-48299A1EBF30"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB6ABB63-E2D2-42F7-B648-BF6002D1C05E"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58FEC4F2-040A-4D23-8FE0-BC55020766BB"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "82520CBD-F42F-4E2D-9D36-878737779690"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4DB87708-B088-47F7-BABA-2CD456766897"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFC1194B-56AC-4850-88B0-5EDFF92FABFC"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "074571B4-65EF-451A-89DC-0797F6E4BFEA"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D909532E-85F5-4201-8BFF-561A21998D97"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:4.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "73D962D3-563F-4CDE-B51D-224D7995FBC9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:xr_12404:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "54D5CEDE-699C-496E-95CF-BEF9BCF55981"}, {"criteria": "cpe:2.3:h:cisco:xr_12406:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4C32030A-3F87-4F01-AA86-493C8F93F777"}, {"criteria": "cpe:2.3:h:cisco:xr_12410:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F5CEC5B1-0595-4163-A458-D4FF29F4E117"}, {"criteria": "cpe:2.3:h:cisco:xr_12416:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DAD5FA50-0753-43EA-8D07-8F5D719E394D"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}

5.3 /10

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.6 /10

Access Vector ADJACENT_NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

JSON object

Attach tags to CVE-2016-1361

5.3^/10

4.6^/10

Attach tags to `CVE-2016-1361`