CVE-2018-0282

Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability

Published Jan 10, 2019 CVSS 3.1 · 6.8 Medium EPSS 2.0% KEV · Not listed
Description
A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state. While this vulnerability potentially affects all TCP applications, the only affected application observed so far is the HTTP server. An attacker could exploit this vulnerability by sending specific HTTP requests at a sustained rate to a reachable IP address of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition on an affected device.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2018-1105 A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state. While this vulnerability potentially affects all TCP applications, the only affected application observed so far is the HTTP server. An attacker could exploit this vulnerability by sending specific HTTP requests at a sustained rate to a reachable IP address of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition on an affected device.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Cisco Catalyst 2960-plus 24lc-l Catalyst 2960-plus 24lc-s Catalyst 2960-plus 24pc-l Catalyst 2960-plus 24pc-s Catalyst 2960-plus 24tc-l Catalyst 2960-plus 24tc-s Catalyst 2960-plus 48pst-l Catalyst 2960-plus 48pst-s Catalyst 2960-plus 48tc-l Catalyst 2960-plus 48tc-s Catalyst 2960c-12pc-l Catalyst 2960c-8pc-l Catalyst 2960c-8tc-l Catalyst 2960c-8tc-s Catalyst 2960cg-8tc-l Catalyst 2960cpd-8pt-l Catalyst 2960cpd-8tt-l Catalyst 2960s-24pd-l Catalyst 2960s-24ps-l Catalyst 2960s-24td-l Catalyst 2960s-24ts-l Catalyst 2960s-48fpd-l Catalyst 2960s-48fps-l Catalyst 2960s-48lpd-l Catalyst 2960s-48lps-l Catalyst 2960s-48td-l Catalyst 2960s-48ts-l Catalyst 2960s-48ts-s Catalyst 2960s-f24ps-l Catalyst 2960s-f24ts-l Catalyst 2960s-f24ts-s Catalyst 2960s-f48fps-l Catalyst 2960s-f48lps-l Catalyst 2960s-f48ts-l Catalyst 2960s-f48ts-s Catalyst 2960x-24pd-l Catalyst 2960x-24ps-l Catalyst 2960x-24psq-l Catalyst 2960x-24td-l Catalyst 2960x-24ts-l Catalyst 2960x-24ts-ll Catalyst 2960x-48fpd-l Catalyst 2960x-48fps-l Catalyst 2960x-48lpd-l Catalyst 2960x-48lps-l Catalyst 2960x-48td-l Catalyst 2960x-48ts-l Catalyst 2960x-48ts-ll Catalyst 2960xr-24pd-i Catalyst 2960xr-24ps-i Catalyst 2960xr-24td-i Catalyst 2960xr-24ts-i Catalyst 2960xr-48fpd-i Catalyst 2960xr-48fps-i Catalyst 2960xr-48lpd-i Catalyst 2960xr-48lps-i Catalyst 2960xr-48td-i Catalyst 2960xr-48ts-i Catalyst 3560c-12pc-s Catalyst 3560c-8pc-s Catalyst 3560cg-8pc-s Catalyst 3560cg-8tc-s Catalyst 3560cpd-8pt-s Catalyst 3560x-24p-e Catalyst 3560x-24p-l Catalyst 3560x-24p-s Catalyst 3560x-24t-e Catalyst 3560x-24t-l Catalyst 3560x-24t-s Catalyst 3560x-24u-e Catalyst 3560x-24u-l Catalyst 3560x-24u-s Catalyst 3560x-48p-e Catalyst 3560x-48p-l Catalyst 3560x-48p-s Catalyst 3560x-48pf-e Catalyst 3560x-48pf-l Catalyst 3560x-48pf-s Catalyst 3560x-48t-e Catalyst 3560x-48t-l Catalyst 3560x-48t-s Catalyst 3560x-48u-e Catalyst 3560x-48u-l Catalyst 3560x-48u-s Catalyst 3750x-12s-e Catalyst 3750x-12s-s Catalyst 3750x-24p-e Catalyst 3750x-24p-l Catalyst 3750x-24p-s Catalyst 3750x-24s-e Catalyst 3750x-24s-s Catalyst 3750x-24t-e Catalyst 3750x-24t-l Catalyst 3750x-24t-s Catalyst 3750x-24u-e Catalyst 3750x-24u-l Catalyst 3750x-24u-s Catalyst 3750x-48p-e Catalyst 3750x-48p-l Catalyst 3750x-48p-s Catalyst 3750x-48pf-e Catalyst 3750x-48pf-l Catalyst 3750x-48pf-s Catalyst 3750x-48t-e Catalyst 3750x-48t-l Catalyst 3750x-48t-s Catalyst 3750x-48u-e Catalyst 3750x-48u-l Catalyst 3750x-48u-s Catalyst 4500 Supervisor Engine 6-e Catalyst 4500 Supervisor Engine 6l-e Catalyst 4900m Catalyst 4948e Catalyst 4948e-f Embedded Service 2020 24tc Con Embedded Service 2020 24tc Con B Embedded Service 2020 24tc Ncp Embedded Service 2020 24tc Ncp B Embedded Service 2020 Con Embedded Service 2020 Con B Embedded Service 2020 Ncp Embedded Service 2020 Ncp B Ie-3010-16s-8pc Ie-3010-24tc Ie 2000-16ptc-g Ie 2000-16t67 Ie 2000-16t67p Ie 2000-16tc Ie 2000-16tc-g Ie 2000-16tc-g-e Ie 2000-16tc-g-n Ie 2000-16tc-g-x Ie 2000-24t67 Ie 2000-4s-ts-g Ie 2000-4t Ie 2000-4t-g Ie 2000-4ts Ie 2000-4ts-g Ie 2000-8t67 Ie 2000-8t67p Ie 2000-8tc Ie 2000-8tc-g Ie 2000-8tc-g-e Ie 2000-8tc-g-n Ie 3000-4tc Ie 3000-8tc Ios Ios Xe Sm-x Layer 2\/3 Etherswitch Service Module
Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Nov 21, 2024, 7:49 PM
Reserved
Nov 27, 2017, 12:00 AM
Status
Modified
Published
Jan 10, 2019, 12:29 AM
Modified
Jun 17, 2026, 1:30 AM