Denial of service in Cisco Catalyst 6800 Series Switches - CVE-2017-12238
Published: September 27, 2017 / Updated: March 8, 2022
Cisco Catalyst 6800 Series Switches
Detailed vulnerability description
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a memory management issue when processing MAC entries. A remote attacker with access to local network can create a large number of VPLS-generated MAC entries in the MAC address table of an affected device and cause a C6800-16P10G or C6800-16P10G-XL type line card to crash.
Successful exploitation of the vulnerability may allow an attacker to perform a denial of service (DoS) attack against affected device.
This vulnerability affects Cisco Catalyst 6800 Series Switches that are running a vulnerable release of Cisco IOS Software and have a Cisco C6800-16P10G or C6800-16P10G-XL line card in use with Supervisor Engine 6T. To be vulnerable, the device must also be configured with VPLS and the C6800-16P10G or C6800-16P10G-XL line card needs to be the core-facing MPLS interfaces.