CVE Feed

    Dashboard / CVE / CVE-2018-0132

    CVE-2018-0132

    A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base (RIB) and the FIB, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect processing of extremely long routing updates. An attacker could exploit this vulnerability by sending a large routing update. A successful exploit could allow the attacker to trigger inconsistency between the FIB and the RIB, resulting in a DoS condition. Cisco Bug IDs: CSCus84718.

    Published:Feb 8, 2018
    Last Modified:Dec 2, 2024
    EPS:Feb 8, 2018
    EPSS Score:0.01409
    CVSS Score:8.6

    Affected Products

    Vendor
    Cisco
    Product
    Carrier Routing System

    Exploits

    No exploit reference

    Related CVEs

    CVE-2019-16019 (CVSS 8.6) — Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functional…
    CVE-2019-16021 (CVSS 7.5) — Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functional…
    CVE-2019-16023 (CVSS 7.5) — Multiple vulnerabilities in the implementation of Border Gateway Protocol (BGP) Ethernet VPN (EVPN) functional…
    CVE-2019-1918 (CVSS 7.4) — A vulnerability in the implementation of Intermediate System–to–Intermediate System (IS–IS) …
    CVE-2019-1910 (CVSS 7.4) — A vulnerability in the implementation of the Intermediate System–to–Intermediate System (IS–…
    CVE-2016-6401 (CVSS 5.3) — Cisco Carrier Routing System (CRS) 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 de…
    CVE-2015-0618 (CVSS 7.1) — Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3 and 5.1.4 on Carrier R…
    CVE-2013-1112 (CVSS 5) — Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (packet loss) via shor…
    CVE-2012-1342 (CVSS 5.8) — Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmen…
    CVE-2011-3283 (CVSS 5) — Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service (Metro subsystem crash…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High