Denial of service in Cisco IOS XR - CVE-2018-0132
Published: February 8, 2018
Vulnerability identifier: #VU10411
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-0132
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists in the forwarding information base (FIB) code of Cisco IOS XR Software due to incorrect processing of extremely long routing updates. a remote attacker can send a large routing update, trigger inconsistency between the FIB and the RIB, resulting in denia of service.
The weakness exists in the forwarding information base (FIB) code of Cisco IOS XR Software due to incorrect processing of extremely long routing updates. a remote attacker can send a large routing update, trigger inconsistency between the FIB and the RIB, resulting in denia of service.
Affected software
Cisco IOS XR
How to mitigate CVE-2018-0132
Install update from vendor's website.