SB20016052601 - Remote denial of service in Cisco IOS

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20016052601

SB20016052601 - Remote denial of service in Cisco IOS

Published: May 26, 2016

Security Bulletin ID SB20016052601
Severity
High
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Improper input validation (CVE-ID: CVE-2016-1409)

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a logic error when parsing IPv6 Neighbor Discovery (ND) packets, sent directly to the device. A remote attacker can send specially crafted IPv6 traffic to the affected device and cause the device to stop processing IPv6 traffic.

Successful exploitation of the vulnerability will result in denial of service attack.

Note: according to Cisco, this vulnerability is being exploited in the wild.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References