CVE-2018-0160 — Double Free in Cisco IOS XE

CWE-415 — Double Free5 documents5 sources
Severity
6.3MEDIUMNVD
EPSS
0.4%
top 36.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS XE
Timeline
PublishedMar 28
Latest updateMay 13

Description

A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper management of memory resources, referred to as a double free. An attacker could exploit this vulnerability by sending crafted SNMP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS conditio…

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 1.8 | Impact: 4.0

Affected Packages1 packages

▶NVDcisco/ios_xe15.5\(3\)s

🔴Vulnerability Details

3
GHSA
GHSA-mr4g-fqm8-vjpv: A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause↗2022-05-13
▶
CVEList
CVE-2018-0160: A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause↗2018-03-28
▶
VulnCheck
Cisco ios_xe Double Free↗2018
▶

📋Vendor Advisories

1
Cisco
Cisco IOS XE Software Simple Network Management Protocol Double-Free Denial of Service Vulnerability↗2018-03-28
▶
CVE-2018-0160 — Double Free in Cisco IOS XE | cvebase