—–BEGIN PGP SIGNED MESSAGE—–
Hash: SHA1

Cisco Security Advisory: Cisco IOS XE Software Zone-Based Firewall IP Fragmentation Denial of Service Vulnerability

Advisory ID: cisco-sa-20180328-fwip

Revision: 1.0

For Public Release: 2018 March 28 16:00 GMT

Last Updated: 2018 March 28 16:00 GMT

CVE ID(s): CVE-2018-0157

CVSS Score v(3): 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

+———————————————————————

Summary
=======
A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload.

The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending fragmented IP Version 4 or IP Version 6 packets through an affected device. An exploit could allow the attacker to cause the device to crash, resulting in a denial of service (DoS) condition.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-fwip [“https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-fwip”]
This advisory is part of the March 28, 2018, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 20 Cisco Security Advisories that describe 22 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: March 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [“https://tools.cisco.com/security/center/viewErp.x?alertId=ERP-66682”].

—–BEGIN PGP SIGNATURE—–
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=+m+c
—–END PGP SIGNATURE—–

_______________________________________________
cust-security-announce mailing list
cust-security-announce@cisco.com
To unsubscribe, send the command “unsubscribe” in the subject of your message to cust-security-announce-leave@cisco.com