CVE-2016-6467
published 2016-12-14CVE-2016-6467: A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthenticated…
PriorityP344high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
3.48%
87.7th percentile
A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit (NPU) process. More Information: CSCva84552. Known Affected Releases: 20.0.0 21.0.0 21.0.M0.64702. Known Fixed Releases: 21.0.0 21.0.0.65256 21.0.M0.64970 21.0.V0.65150 21.1.A0.64973 21.1.PP0.65270 21.1.R0.65130 21.1.R0.65135 21.1.VC0.65203.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | asr_5000_series_ipv6_packet_processing | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
| cisco | asr_5000_series_software | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vendor_cisco5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3m3c-3279-wprv: A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthentic
ghsa_unreviewed·2022-05-17
CVE-2016-6467 [HIGH] GHSA-3m3c-3279-wprv: A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthentic
A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit (NPU) process. More Information: CSCva84552. Known Affected Releases: 20.0.0 21.0.0 21.0.M0.64702. Known Fixed Releases: 21.0.0 21.0.0.65256 21.0.M0.64970 21.0.V0.65150 21.1.A0.64973 21.1.PP0.65270 21.1.R0.65130 21.1.R0.65135 21.1.VC0.65203.
Cisco
Cisco ASR 5000 Series IPv6 Packet Processing Denial of Service Vulnerability
vendor_cisco·2016-12-07·CVSS 5.0
CVE-2016-6467 [MEDIUM] CWE-399 Cisco ASR 5000 Series IPv6 Packet Processing Denial of Service Vulnerability
Cisco ASR 5000 Series IPv6 Packet Processing Denial of Service Vulnerability
A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit (NPU) process.
The vulnerability is due to lack of proper input validation of the IPv6 fragment lengths. An attacker could exploit this vulnerability by sending a crafted IPv6 fragment chain to the targeted device. An exploit could allow the attacker to cause a denial of service (DoS) condition if the NPU process unexpectedly reloads. The DoS condition could temporarily impact user traffic.
There are no workarounds that address this vulnerability.
This advisory is available at the
Cisco
Cisco ASR 5000 Series IPv6 Packet Processing Denial of Service Vulnerability
vendor_cisco
CVE-2016-6467 Cisco ASR 5000 Series IPv6 Packet Processing Denial of Service Vulnerability
CVE-2016-6467: Cisco ASR 5000 Series IPv6 Packet Processing Denial of Service Vulnerability
A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit (NPU) process. The vulnerability is due to lack of proper input validation of the IPv6 fragment lengths. An attacker could exploit this vulnerability by sending a crafted IPv6 fragment chain to the targeted device. An exploit could allow the attacker to cause a denial of service (DoS) condition if the NPU process unexpectedly reloads. The DoS condition could temporarily impact user traffic. There are no
CWE: CWE-399, CWE-399
Bug IDs: CSCva84552
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/94772http://www.securitytracker.com/id/1037416https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-asrhttp://www.securityfocus.com/bid/94772http://www.securitytracker.com/id/1037416https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-asr
2016-12-14
Published