Most recent entries from all

bdu:2014-00034

fkie_cve-2012-0381

GHSA-34wg-h45c-wrjc

gsd-2012-0381

VAR-201203-0211

The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) by sending IKE UDP packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCts38429. Cisco IOS is a popular Internet operating system. The Cisco IOS Internet Key Exchange (IKE) feature has a security vulnerability that allows unauthenticated remote attackers to overload affected devices. An attacker can attack any UDP port that is being monitored through IPv4 or IPv6. Because the attacker needs to receive or access the initialization response of the affected device, it needs to forge a packet to exploit this vulnerability. Cisco is prone to a remote denial-of-service vulnerability. The following products using Internet Key Exchange (IKE) are vulnerable: LAN-to-LAN VPN. Remote access VPN (excluding SSLVPN). Dynamic Multipoint VPN (DMVPN). Group Domain of Interpretation (GDOI). This issue is being tracked by Cisco Bug ID CSCts38429. A vulnerability exists in the IKEv1 implementation in 3.2.xSG versions prior to 2SG.

For more information: SA48605

The vulnerability is reported in version 2.1.x, 2.2.x, 2.3.x, 2.4.x, 2.5.x, 2.6.x, 3.1.x, and 3.3.x.

Cisco has released free software updates that address this vulnerability.

This advisory is available at the following link:

http://tools.cisco.com/security/center/cont…