Description (CNA)
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device after forming an adjacency. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2-adjacent to the affected device and have formed an adjacency.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / IOS | affected 15.2(1)S; affected 15.2(2)S; affected 15.2(1)S1; affected 15.2(4)S; affected 15.2(1)S2; affected 15.2(2)S1; affected 15.2(2)S2; affected 15.2(2)S0a; affected 15.2(2)S0c; affected 15.2(4)S1; affected 15.2(4)S4; affected 15.2(4)S6; affected 15.2(4)S2; affected 15.2(4)S5; affected 15.2(4)S3; affected 15.2(4)S3a; affected 15.2(4)S4a; affected 15.2(4)S7; affected 15.3(1)T; affected 15.3(2)T; affected 15.3(1)T1; affected 15.3(1)T2; affected 15.3(1)T3; affected 15.3(1)T4; affected 15.3(2)T1; affected 15.3(2)T2; affected 15.3(2)T3; affected 15.3(2)T4; affected 15.1(2)SG; affected 15.1(2)SG1; affected 15.1(2)SG2; affected 15.1(2)SG3; affected 15.1(2)SG4; affected 15.1(2)SG5; affected 15.1(2)SG6; affected 15.1(2)SG7; affected 15.1(2)SG8; affected 15.2(4)M; affected 15.2(4)M1; affected 15.2(4)M2; affected 15.2(4)M4; affected 15.2(4)M3; affected 15.2(4)M5; affected 15.2(4)M8; affected 15.2(4)M10; affected 15.2(4)M7; affected 15.2(4)M6; affected 15.2(4)M9; affected 15.2(4)M6a; affected 15.2(4)M11; affected 15.0(1)EX; affected 15.2(3)GC; affected 15.2(3)GC1; affected 15.2(4)GC; affected 15.2(4)GC1; affected 15.2(4)GC2; affected 15.2(4)GC3; affected 15.1(1)SY; affected 15.1(1)SY1; affected 15.1(2)SY; affected 15.1(2)SY1; affected 15.1(2)SY2; affected 15.1(1)SY2; affected 15.1(1)SY3; affected 15.1(2)SY3; affected 15.1(1)SY4; affected 15.1(2)SY4; affected 15.1(1)SY5; affected 15.1(2)SY5; affected 15.1(2)SY4a; affected 15.1(1)SY6; affected 15.1(2)SY6; affected 15.1(2)SY7; affected 15.1(2)SY8; affected 15.1(2)SY9; affected 15.1(2)SY10; affected 15.1(2)SY11; affected 15.1(2)SY12; affected 15.1(2)SY13; affected 15.1(2)SY14; affected 15.1(2)SY15; affected 15.1(2)SY16; affected 15.3(1)S; affected 15.3(2)S; affected 15.3(3)S; affected 15.3(1)S2; affected 15.3(1)S1; affected 15.3(2)S2; affected 15.3(2)S1; affected 15.3(3)S1; affected 15.3(3)S2; affected 15.3(3)S3; affected 15.3(3)S6; affected 15.3(3)S4; affected 15.3(3)S1a; affected 15.3(3)S5; affected 15.3(3)S7; affected 15.3(3)S8; affected 15.3(3)S9; affected 15.3(3)S10; affected 15.3(3)S8a; affected 15.4(1)T; affected 15.4(2)T; affected 15.4(1)T2; affected 15.4(1)T1; affected 15.4(1)T3; affected 15.4(2)T1; affected 15.4(2)T3; affected 15.4(2)T2; affected 15.4(1)T4; affected 15.4(2)T4; affected 15.2(1)E; affected 15.2(2)E; affected 15.2(1)E1; affected 15.2(3)E; affected 15.2(1)E2; affected 15.2(1)E3; affected 15.2(2)E1; affected 15.2(4)E; affected 15.2(3)E1; affected 15.2(2)E2; affected 15.2(2)E3; affected 15.2(2a)E2; affected 15.2(3)E2; affected 15.2(3a)E; affected 15.2(3)E3; affected 15.2(4)E1; affected 15.2(2)E4; affected 15.2(2)E5; affected 15.2(4)E2; affected 15.2(3)E4; affected 15.2(5)E; affected 15.2(4)E3; affected 15.2(2)E6; affected 15.2(5)E1; affected 15.2(2)E5a; affected 15.2(3)E5; affected 15.2(2)E5b; affected 15.2(5a)E1; affected 15.2(4)E4; affected 15.2(2)E7; affected 15.2(5)E2; affected 15.2(6)E; affected 15.2(5)E2b; affected 15.2(4)E5; affected 15.2(5)E2c; affected 15.2(2)E8; affected 15.2(6)E0a; affected 15.2(6)E1; affected 15.2(2)E7b; affected 15.2(4)E5a; affected 15.2(6)E0c; affected 15.2(4)E6; affected 15.2(6)E2; affected 15.2(2)E9; affected 15.2(4)E7; affected 15.2(7)E; affected 15.2(2)E10; affected 15.2(4)E8; affected 15.2(6)E2a; affected 15.2(7)E1; affected 15.2(7)E0b; affected 15.2(7)E0s; affected 15.2(6)E3; affected 15.2(4)E9; affected 15.2(7)E2; affected 15.2(7a)E0b; affected 15.2(4)E10; affected 15.2(7)E3; affected 15.2(7)E1a; affected 15.2(7b)E0b; affected 15.2(4)E10a; affected 15.2(7)E4; affected 15.2(8)E; affected 15.2(8)E1; affected 15.2(7)E5; affected 15.2(7)E6; affected 15.2(8)E2; affected 15.2(4)E10d; affected 15.2(7)E7; affected 15.2(8)E3; affected 15.2(7)E8; affected 15.2(8)E4; affected 15.2(4)E10e; affected 15.2(7)E9; affected 15.2(8)E5; affected 15.4(1)S; affected 15.4(2)S; affected 15.4(3)S; affected 15.4(1)S1; affected 15.4(1)S2; affected 15.4(2)S1; affected 15.4(1)S3; affected 15.4(3)S1; affected 15.4(2)S2; affected 15.4(3)S2; affected 15.4(3)S3; affected 15.4(1)S4; affected 15.4(2)S3; affected 15.4(2)S4; affected 15.4(3)S4; affected 15.4(3)S5; affected 15.4(3)S6; affected 15.4(3)S7; affected 15.4(3)S6a; affected 15.4(3)S8; affected 15.4(3)S9; affected 15.4(3)S10; affected 15.3(3)M; affected 15.3(3)M1; affected 15.3(3)M2; affected 15.3(3)M3; affected 15.3(3)M5; affected 15.3(3)M4; affected 15.3(3)M6; affected 15.3(3)M7; affected 15.3(3)M8; affected 15.3(3)M9; affected 15.3(3)M10; affected 15.3(3)M8a; affected 15.2(1)EY; affected 15.2(1)SY; affected 15.2(1)SY1; affected 15.2(1)SY0a; affected 15.2(1)SY2; affected 15.2(2)SY; affected 15.2(1)SY1a; affected 15.2(2)SY1; affected 15.2(2)SY2; affected 15.2(1)SY3; affected 15.2(1)SY4; affected 15.2(2)SY3; affected 15.2(1)SY5; affected 15.2(1)SY6; affected 15.2(1)SY7; affected 15.2(1)SY8; affected 15.4(1)CG; affected 15.4(1)CG1; affected 15.4(2)CG; affected 15.5(1)S; affected 15.5(2)S; affected 15.5(1)S1; affected 15.5(3)S; affected 15.5(1)S2; affected 15.5(1)S3; affected 15.5(2)S1; affected 15.5(2)S2; affected 15.5(3)S1; affected 15.5(3)S1a; affected 15.5(2)S3; affected 15.5(3)S2; affected 15.5(3)S0a; affected 15.5(3)S3; affected 15.5(1)S4; affected 15.5(2)S4; affected 15.5(3)S4; affected 15.5(3)S5; affected 15.5(3)S6; affected 15.5(3)S6a; affected 15.5(3)S7; affected 15.5(3)S6b; affected 15.5(3)S8; affected 15.5(3)S9; affected 15.5(3)S10; affected 15.5(3)S9a; affected 15.2(2)EB; affected 15.2(2)EB1; affected 15.2(2)EB2; affected 15.2(6)EB; affected 15.5(1)T; affected 15.5(1)T1; affected 15.5(2)T; affected 15.5(1)T2; affected 15.5(1)T3; affected 15.5(2)T1; affected 15.5(2)T2; affected 15.5(2)T3; affected 15.5(2)T4; affected 15.5(1)T4; affected 15.2(2)EA; affected 15.2(2)EA1; affected 15.2(2)EA2; affected 15.2(3)EA; affected 15.2(4)EA; affected 15.2(4)EA1; affected 15.2(2)EA3; affected 15.2(4)EA3; affected 15.2(5)EA; affected 15.2(4)EA4; affected 15.2(4)EA5; affected 15.2(4)EA6; affected 15.2(4)EA7; affected 15.2(4)EA8; affected 15.2(4)EA9; affected 15.2(4)EA9a; affected 15.5(3)M; affected 15.5(3)M1; affected 15.5(3)M0a; affected 15.5(3)M2; affected 15.5(3)M3; affected 15.5(3)M4; affected 15.5(3)M4a; affected 15.5(3)M5; affected 15.5(3)M6; affected 15.5(3)M7; affected 15.5(3)M6a; affected 15.5(3)M8; affected 15.5(3)M9; affected 15.5(3)M10; affected 15.5(3)SN; affected 15.6(1)S; affected 15.6(2)S; affected 15.6(2)S1; affected 15.6(1)S1; affected 15.6(1)S2; affected 15.6(2)S2; affected 15.6(1)S3; affected 15.6(2)S3; affected 15.6(1)S4; affected 15.6(2)S4; affected 15.6(1)T; affected 15.6(2)T; affected 15.6(1)T0a; affected 15.6(1)T1; affected 15.6(2)T1; affected 15.6(1)T2; affected 15.6(2)T2; affected 15.6(1)T3; affected 15.6(2)T3; affected 15.3(1)SY; affected 15.3(1)SY1; affected 15.3(1)SY2; affected 15.6(2)SP; affected 15.6(2)SP1; affected 15.6(2)SP2; affected 15.6(2)SP3; affected 15.6(2)SP4; affected 15.6(2)SP5; affected 15.6(2)SP6; affected 15.6(2)SP7; affected 15.6(2)SP8; affected 15.6(2)SP9; affected 15.6(2)SP10; affected 15.6(2)SN; affected 15.6(3)M; affected 15.6(3)M1; affected 15.6(3)M0a; affected 15.6(3)M1b; affected 15.6(3)M2; affected 15.6(3)M3; affected 15.6(3)M3a; affected 15.6(3)M4; affected 15.6(3)M5; affected 15.6(3)M6; affected 15.6(3)M7; affected 15.6(3)M6a; affected 15.6(3)M6b; affected 15.6(3)M8; affected 15.6(3)M9; affected 15.2(4)EC1; affected 15.2(4)EC2; affected 15.4(1)SY; affected 15.4(1)SY1; affected 15.4(1)SY2; affected 15.4(1)SY3; affected 15.4(1)SY4; affected 15.5(1)SY; affected 15.5(1)SY1; affected 15.5(1)SY2; affected 15.5(1)SY3; affected 15.5(1)SY4; affected 15.5(1)SY5; affected 15.5(1)SY6; affected 15.5(1)SY7; affected 15.5(1)SY8; affected 15.5(1)SY9; affected 15.5(1)SY10; affected 15.5(1)SY11; affected 15.5(1)SY12; affected 15.7(3)M; affected 15.7(3)M1; affected 15.7(3)M0a; affected 15.7(3)M3; affected 15.7(3)M2; affected 15.7(3)M4; affected 15.7(3)M5; affected 15.7(3)M4a; affected 15.7(3)M4b; affected 15.7(3)M6; affected 15.7(3)M7; affected 15.7(3)M8; affected 15.7(3)M9; affected 15.8(3)M; affected 15.8(3)M1; affected 15.8(3)M0a; affected 15.8(3)M0b; affected 15.8(3)M2; affected 15.8(3)M1a; affected 15.8(3)M3; affected 15.8(3)M2a; affected 15.8(3)M4; affected 15.8(3)M3a; affected 15.8(3)M3b; affected 15.8(3)M5; affected 15.8(3)M6; affected 15.8(3)M7; affected 15.8(3)M8; affected 15.8(3)M9; affected 15.9(3)M; affected 15.9(3)M1; affected 15.9(3)M0a; affected 15.9(3)M2; affected 15.9(3)M3; affected 15.9(3)M2a; affected 15.9(3)M3a; affected 15.9(3)M4; affected 15.9(3)M3b; affected 15.9(3)M5; affected 15.9(3)M4a; affected 15.9(3)M6; affected 15.9(3)M7; affected 15.9(3)M6a; affected 15.9(3)M6b; affected 15.9(3)M8; affected 15.9(3)M7a; affected 15.9(3)M8b |
| Cisco / Cisco IOS XE Software | affected 3.7.0S; affected 3.7.1S; affected 3.7.2S; affected 3.7.3S; affected 3.7.4S; affected 3.7.5S; affected 3.7.6S; affected 3.7.7S; affected 3.7.4aS; affected 3.7.2tS; affected 3.7.0bS; affected 3.7.1aS; affected 3.8.0S; affected 3.8.1S; affected 3.8.2S; affected 3.9.1S; affected 3.9.0S; affected 3.9.2S; affected 3.9.1aS; affected 3.9.0aS; affected 3.2.0SE; affected 3.2.1SE; affected 3.2.2SE; affected 3.2.3SE; affected 3.3.0SE; affected 3.3.1SE; affected 3.3.2SE; affected 3.3.3SE; affected 3.3.4SE; affected 3.3.5SE; affected 3.3.0XO; affected 3.3.1XO; affected 3.3.2XO; affected 3.4.0SG; affected 3.4.2SG; affected 3.4.1SG; affected 3.4.3SG; affected 3.4.4SG; affected 3.4.5SG; affected 3.4.6SG; affected 3.4.7SG; affected 3.4.8SG; affected 3.5.0E; affected 3.5.1E; affected 3.5.2E; affected 3.5.3E; affected 3.10.0S; affected 3.10.1S; affected 3.10.2S; affected 3.10.3S; affected 3.10.4S; affected 3.10.5S; affected 3.10.6S; affected 3.10.2tS; affected 3.10.7S; affected 3.10.1xbS; affected 3.10.8S; affected 3.10.8aS; affected 3.10.9S; affected 3.10.10S; affected 3.11.1S; affected 3.11.2S; affected 3.11.0S; affected 3.11.3S; affected 3.11.4S; affected 3.12.0S; affected 3.12.1S; affected 3.12.2S; affected 3.12.3S; affected 3.12.0aS; affected 3.12.4S; affected 3.13.0S; affected 3.13.1S; affected 3.13.2S; affected 3.13.3S; affected 3.13.4S; affected 3.13.5S; affected 3.13.2aS; affected 3.13.0aS; affected 3.13.5aS; affected 3.13.6S; affected 3.13.7S; affected 3.13.6aS; affected 3.13.7aS; affected 3.13.8S; affected 3.13.9S; affected 3.13.10S; affected 3.6.0E; affected 3.6.1E; affected 3.6.2aE; affected 3.6.2E; affected 3.6.3E; affected 3.6.4E; affected 3.6.5E; affected 3.6.6E; affected 3.6.5aE; affected 3.6.5bE; affected 3.6.7E; affected 3.6.8E; affected 3.6.7bE; affected 3.6.9E; affected 3.6.10E; affected 3.14.0S; affected 3.14.1S; affected 3.14.2S; affected 3.14.3S; affected 3.14.4S; affected 3.15.0S; affected 3.15.1S; affected 3.15.2S; affected 3.15.1cS; affected 3.15.3S; affected 3.15.4S; affected 3.7.0E; affected 3.7.1E; affected 3.7.2E; affected 3.7.3E; affected 3.7.4E; affected 3.7.5E; affected 3.16.0S; affected 3.16.1S; affected 3.16.1aS; affected 3.16.2S; affected 3.16.2aS; affected 3.16.0cS; affected 3.16.3S; affected 3.16.2bS; affected 3.16.3aS; affected 3.16.4S; affected 3.16.4aS; affected 3.16.4bS; affected 3.16.5S; affected 3.16.4dS; affected 3.16.6S; affected 3.16.7S; affected 3.16.6bS; affected 3.16.7aS; affected 3.16.7bS; affected 3.16.8S; affected 3.16.9S; affected 3.16.10S; affected 3.17.0S; affected 3.17.1S; affected 3.17.2S; affected 3.17.1aS; affected 3.17.3S; affected 3.17.4S; affected 16.1.1; affected 16.1.2; affected 16.1.3; affected 16.2.1; affected 16.2.2; affected 3.8.0E; affected 3.8.1E; affected 3.8.2E; affected 3.8.3E; affected 3.8.4E; affected 3.8.5E; affected 3.8.5aE; affected 3.8.6E; affected 3.8.7E; affected 3.8.8E; affected 3.8.9E; affected 3.8.10E; affected 3.8.10eE; affected 16.3.1; affected 16.3.2; affected 16.3.3; affected 16.3.1a; affected 16.3.4; affected 16.3.5; affected 16.3.5b; affected 16.3.6; affected 16.3.7; affected 16.3.8; affected 16.3.9; affected 16.3.10; affected 16.3.11; affected 16.4.1; affected 16.4.2; affected 16.4.3; affected 16.5.1; affected 16.5.1a; affected 16.5.1b; affected 16.5.2; affected 16.5.3; affected 3.18.0aS; affected 3.18.0S; affected 3.18.1S; affected 3.18.2S; affected 3.18.3S; affected 3.18.4S; affected 3.18.0SP; affected 3.18.1SP; affected 3.18.1aSP; affected 3.18.1bSP; affected 3.18.1cSP; affected 3.18.2SP; affected 3.18.2aSP; affected 3.18.3SP; affected 3.18.4SP; affected 3.18.3aSP; affected 3.18.3bSP; affected 3.18.5SP; affected 3.18.6SP; affected 3.18.7SP; affected 3.18.8aSP; affected 3.18.9SP; affected 3.9.0E; affected 3.9.1E; affected 3.9.2E; affected 16.6.1; affected 16.6.2; affected 16.6.3; affected 16.6.4; affected 16.6.5; affected 16.6.4a; affected 16.6.5a; affected 16.6.6; affected 16.6.7; affected 16.6.8; affected 16.6.9; affected 16.6.10; affected 16.7.1; affected 16.7.1a; affected 16.7.1b; affected 16.7.2; affected 16.7.3; affected 16.7.4; affected 16.8.1; affected 16.8.1a; affected 16.8.1b; affected 16.8.1s; affected 16.8.1c; affected 16.8.1d; affected 16.8.2; affected 16.8.1e; affected 16.8.3; affected 16.9.1; affected 16.9.2; affected 16.9.1a; affected 16.9.1b; affected 16.9.1s; affected 16.9.3; affected 16.9.4; affected 16.9.3a; affected 16.9.5; affected 16.9.5f; affected 16.9.6; affected 16.9.7; affected 16.9.8; affected 16.10.1; affected 16.10.1a; affected 16.10.1b; affected 16.10.1s; affected 16.10.1c; affected 16.10.1e; affected 16.10.1d; affected 16.10.2; affected 16.10.1f; affected 16.10.1g; affected 16.10.3; affected 3.10.0E; affected 3.10.1E; affected 3.10.0cE; affected 3.10.2E; affected 3.10.3E; affected 16.11.1; affected 16.11.1a; affected 16.11.1b; affected 16.11.2; affected 16.11.1s; affected 16.12.1; affected 16.12.1s; affected 16.12.1a; affected 16.12.1c; affected 16.12.1w; affected 16.12.2; affected 16.12.1y; affected 16.12.2a; affected 16.12.3; affected 16.12.8; affected 16.12.2s; affected 16.12.1x; affected 16.12.1t; affected 16.12.4; affected 16.12.3s; affected 16.12.3a; affected 16.12.4a; affected 16.12.5; affected 16.12.6; affected 16.12.1z1; affected 16.12.5a; affected 16.12.5b; affected 16.12.1z2; affected 16.12.6a; affected 16.12.7; affected 16.12.9; affected 16.12.10; affected 16.12.10a; affected 3.11.0E; affected 3.11.1E; affected 3.11.2E; affected 3.11.3E; affected 3.11.1aE; affected 3.11.4E; affected 3.11.3aE; affected 3.11.5E; affected 3.11.6E; affected 3.11.7E; affected 3.11.8E; affected 3.11.9E; affected 17.1.1; affected 17.1.1a; affected 17.1.1s; affected 17.1.1t; affected 17.1.3; affected 17.2.1; affected 17.2.1r; affected 17.2.1a; affected 17.2.1v; affected 17.2.2; affected 17.2.3; affected 17.3.1; affected 17.3.2; affected 17.3.3; affected 17.3.1a; affected 17.3.1w; affected 17.3.2a; affected 17.3.1x; affected 17.3.1z; affected 17.3.4; affected 17.3.5; affected 17.3.4a; affected 17.3.6; affected 17.3.4b; affected 17.3.4c; affected 17.3.5a; affected 17.3.5b; affected 17.3.7; affected 17.3.8; affected 17.3.8a; affected 17.4.1; affected 17.4.2; affected 17.4.1a; affected 17.4.1b; affected 17.4.2a; affected 17.5.1; affected 17.5.1a; affected 17.6.1; affected 17.6.2; affected 17.6.1w; affected 17.6.1a; affected 17.6.1x; affected 17.6.3; affected 17.6.1y; affected 17.6.1z; affected 17.6.3a; affected 17.6.4; affected 17.6.1z1; affected 17.6.5; affected 17.6.5a; affected 17.7.1; affected 17.7.1a; affected 17.7.1b; affected 17.7.2; affected 17.10.1; affected 17.10.1a; affected 17.10.1b; affected 17.8.1; affected 17.8.1a; affected 17.9.1; affected 17.9.1w; affected 17.9.2; affected 17.9.1a; affected 17.9.1x; affected 17.9.1y; affected 17.9.3; affected 17.9.2a; affected 17.9.1x1; affected 17.9.3a; affected 17.9.1y1; affected 17.11.1; affected 17.11.1a; affected 17.11.99SW |
CWE
CWE-476
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-isis-sGjyOUHX
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.