Send sanog mailing list submissions to
[email protected]
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.sanog.org/mailman/listinfo/sanog
or, via email, send a message with subject or body 'help' to
[email protected]
You can reach the person managing the list at
[email protected]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of sanog digest..."
Today's Topics:
1. Cisco Security Advisory: Cisco IOS and IOS XE Software DHCP
Client Denial of Service Vulnerability ([email protected])
----------------------------------------------------------------------
Message: 1
Date: 22 Mar 2017 11:12:50 -0500
From: [email protected]
To: [email protected]
Subject: [SANOG] Cisco Security Advisory: Cisco IOS and IOS XE
Software DHCP Client Denial of Service Vulnerability
Message-ID: 201703221612.12.dhcpc
Content-Type: text/plain; charset=us-ascii
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Cisco Security Advisory: Cisco IOS and IOS XE Software DHCP Client Denial of
Service Vulnerability
Advisory ID: cisco-sa-20170322-dhcpc
Revision: 1.0
For Public Release: 2017 March 22 16:00 GMT
Last Updated: 2017 March 22 16:00 GMT
CVE ID(s): CVE-2017-3864
CVSS Score v(3): 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
+---------------------------------------------------------------------
Summary
=======
A vulnerability in the DHCP client implementation of Cisco IOS and Cisco IOS XE
Software could allow an unauthenticated, remote attacker to cause a denial of
service (DoS) condition.
The vulnerability occurs during the parsing of a crafted DHCP packet. An
attacker could exploit this vulnerability by sending crafted DHCP packets to an
affected device that is configured as a DHCP client. A successful exploit could
allow the attacker to cause a reload of an affected device, resulting in a DoS
condition.
Cisco has released software updates that address this vulnerability. There are
no workarounds that address this vulnerability.
This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-dhcpc
["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170322-dhcpc";]
This advisory is part of the March 22, 2017, release of the Cisco IOS and IOS
XE Software Security Advisory Bundled Publication, which includes five Cisco
Security Advisories that describe five vulnerabilities. All the vulnerabilities
have a Security Impact Rating of High. For a complete list of the advisories
and links to them, see Cisco Event Response: March 2017 Semiannual Cisco IOS
and IOS XE Software Security Advisory Bundled Publication
["http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-60851";].
-----BEGIN PGP SIGNATURE-----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=Uk+n
-----END PGP SIGNATURE-----
------------------------------
Subject: Digest Footer
_______________________________________________
sanog mailing list
[email protected]
https://lists.sanog.org/mailman/listinfo/sanog
------------------------------
End of sanog Digest, Vol 62, Issue 4
************************************
