{
  "document": {
    "acknowledgments": [
      {
        "summary": "This vulnerability was reported by Juha-Matti Tilli, of the Aalto University Department of Communications and Networking, and Nokia Bell Labs."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "notes": [
      {
        "category": "summary",
        "text": "On August 14, 2018, the Vulnerability Coordination team of the National Cyber Security Centre of Finland (NCSC-FI) and the CERT Coordination Center (CERT/CC) disclosed a vulnerability in the IP stack that is used by the Linux Kernel. This vulnerability is publicly known as FragmentSmack.\r\n\r\nThe vulnerability could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. An attack could be executed by an attacker who can submit a stream of fragmented IPv4 or IPv6 packets that are designed to trigger the issue on an affected device.\r\n\r\nThe vulnerability is due to inefficient IPv4 and IPv6 fragment reassembly algorithms in the IP stack that is used by the affected kernel. Linux Kernel Versions 3.9 and later are known to be affected by this vulnerability.\r\n\r\nThis advisory is available at the following link:\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-ip-fragment [\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-ip-fragment\"]",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "Cisco investigated its product line to determine which products and services may be affected by this vulnerability.\r\n\r\nThe \u201cVulnerable Products\u201d section of this advisory includes Cisco bug IDs for each affected product or service. The bugs are accessible through the Cisco Bug Search Tool [\"https://bst.cloudapps.cisco.com/bugsearch/bug/BUGID\"] and contain additional platform-specific information, including workarounds (if available) and fixed software releases.\r\n\r\nAny product or service not listed in the \u201cProducts Under  Investigation\u201d or \u201cVulnerable Products\u201d section of this advisory is to  be considered not vulnerable.",
        "title": "Affected Products"
      },
      {
        "category": "general",
        "text": "The following table lists Cisco products that are affected by the vulnerability that is described in this advisory:\r\n                                Product              Cisco Bug ID              Fixed Release Availability                                  Collaboration and Social Media                                  Cisco SocialMiner              CSCvk78929 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78929\"]              Consult the Cisco bug ID for details\r\n                                  Network Application, Service, and Acceleration                                  Cisco Cloud Services Platform 2100              CSCvm15451 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15451\"]              2.4.0 (Jan-2019)\r\n                                  Cisco Tetration Analytics              CSCvm15463 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15463\"]              3.2 (Mar-2019)\r\n                                  Cisco vEdge 100 Series Routers              CSCvm15501 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15501\"]              18.3.3 (Oct-2018)\r\n18.4.0 (Nov-2018)\r\n                                  Cisco vEdge 1000 Series Routers              CSCvm15501 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15501\"]              18.3.3 (Oct-2018)\r\n18.4.0 (Nov-2018)\r\n                                  Cisco vEdge 2000 Series Routers              CSCvm15501 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15501\"]              18.3.3 (Oct-2018)\r\n18.4.0 (Nov-2018)\r\n                                  Cisco vEdge 5000 Series Routers              CSCvm15501 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15501\"]              18.3.3 (Oct-2018)\r\n18.4.0 (Nov-2018)\r\n                                  Cisco vEdge Cloud Router Platform              CSCvm15501 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15501\"]              18.3.3 (Oct-2018)\r\n18.4.0 (Nov-2018)\r\n                                  Network and Content Security Devices                                  Cisco AMP Virtual Private Cloud Appliance              CSCvm56669 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm56669\"]              Consult the Cisco bug ID for details\r\n                                  Cisco FireSIGHT System Software              CSCvm10968 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm10968\"]              6.2.3.9 (Jan-2019)\r\n6.3.0 (Dec-2018)                                  Cisco Firepower Management Center              CSCvm10968 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm10968\"]              6.2.3.9 (Jan-2019)\r\n6.3.0 (Dec-2018)                                  Cisco Firepower Threat Defense (FTD) Software              CSCvm05464 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm05464\"]              6.2.3.6 (Oct-2018)\r\n6.2.2.5 (Nov-2018)\r\n6.2.0.7 (Dec-2018)\r\n6.2.3-99 (FTD Virtual for the Microsoft Azure Cloud - Available)                                  Cisco Firepower eXtensible Operating System (FXOS) Software              CSCvm21278 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm21278\"]              2.4.1 (Oct-2018)                                  Cisco Identity Services Engine (ISE)              CSCvm15495 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15495\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Secure Access Control System (ACS)              CSCvm09119 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm09119\"]              No fix expected - End of life\r\n                                  Cisco Threat Grid Appliance              CSCvm15448 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15448\"]              2.5 (Sep-2018)                                  Cisco Umbrella Virtual Appliance              CSCvm15497 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15497\"]              v2.3 (Oct-2018)                                  Network Management and Provisioning                                  Cisco CloudCenter              CSCvm40406 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm40406\"]              4.10.0.1 (Nov-2018)                                  Cisco Common Services Platform Collector              CSCvm59990 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm59990\"]              CSPC 2.8.0.1 (Nov-2018)\r\nCSPC 2.7.4.4 (Nov-2018)                                  Cisco Elastic Service Controller (ESC)              CSCvm15475 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15475\"]              Contact the Cisco TAC for remediation options\r\n                                  Cisco Enterprise Service Automation              CSCvm15467 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15467\"]              No fix expected - End of life\r\n                                  Cisco Evolved Programmable Network Manager              CSCvm18160 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm18160\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Meeting Server              CSCvm15488 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15488\"]              2.5 (Dec-2018)\r\n                                  Cisco Network Analysis Module              CSCvm15477 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15477\"]              6.4(2) (Jan-2019)\r\n                                  Cisco Policy Suite              CSCvm15802 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15802\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Prime Collaboration Assurance              CSCvm15480 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15480\"]              11.6 es19 (Oct-2018)\r\n12.1 sp2 (Oct-2018)                                  Cisco Prime Collaboration Deployment              CSCvm15504 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15504\"]              12.5(1) (Dec-2018)\r\n                                  Cisco Prime Collaboration Provisioning              CSCvm15479 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15479\"]              12.6 (Nov-2018)\r\n                                  Cisco Prime Infrastructure              CSCvm15478 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15478\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Prime Network Registrar Virtual Appliance              CSCvm15471 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15471\"]              10.0.1 (Mar-2019)\r\n                                  Cisco Prime Service Catalog Virtual Appliance              CSCvm15492 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15492\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Virtual Topology System - Virtual Topology Controller (VTC) VM              CSCvm21613 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm21613\"]              2.6.2 (Sep-2018)                                  Cisco Virtual Topology System - Virtual Topology Forwarder (VTF) VM              CSCvm21614 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm21614\"]              Consult the Cisco bug ID for details                                  Routing and Switching - Enterprise and Service Provider                                  Cisco ACI Virtual Edge              CSCvm15456 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15456\"]              2.1(1a) (Sep-2018)                                  Cisco Application Policy Infrastructure Controller (APIC) - Enterprise Module              CSCvm15473 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15473\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Application Policy Infrastructure Controller (APIC)              CSCvm15454 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15454\"]              4.0 (Oct-2018)\r\n3.2.4 (Nov-2018)                                  Cisco DNA Center              CSCvm15474 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15474\"]              1.3 (Apr-2019)\r\n                                  Cisco IOS XE Software              CSCvm09121 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm09121\"]              16.10.1 (Oct-2018)\r\n16.9.2 (Oct-2018)\r\n16.6.5 (Dec-2018)\r\n16.3.8 (Jan-2019)\r\n                                  Cisco IOx Fog Director              CSCvm15498 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15498\"]              FD-1.8.0 (Feb-2019)\r\n                                  Cisco MDS 9000 Series Multilayer Switches              CSCvm15459 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15459\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Network Assurance Engine              CSCvm15450 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15450\"]              3.0(0) (Nov-2018)\r\n                                  Cisco Nexus 3000 Series Switches              CSCvm09117 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm09117\"]              9.2(2) (Nov-2018)\r\n                                  Cisco Nexus 7000 Series Switches              CSCvm15461 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15461\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Nexus 9000 Series Fabric Switches - ACI mode              CSCvm15457 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15457\"]              14.0 (Oct-2018)\r\n13.2.4 (Nov-2018)\r\n                                  Cisco Nexus 9000 Series Switches - Standalone, NX-OS mode              CSCvm09117 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm09117\"]              9.2(2) (Nov-2018)\r\n                                  Unified Computing                                  Cisco Enterprise NFV Infrastructure Software (NFVIS)              CSCvn69988 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvn69988\"]              3.11.1 (Mar-2019)\r\n                                  Cisco HyperFlex System              CSCvm15800 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15800\"]              3.5(1a) (Oct-2018)\r\n                                  Cisco UCS B-Series M5 Blade Servers - Integrated Management Controller              CSCvm18261 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm18261\"]              Consult the Cisco bug ID for details\r\n                                  Cisco UCS Standalone C-Series M5 Rack Server - Integrated Management Controller              CSCvm15466 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15466\"]              4.0(2a) (Nov-2018)\r\n3.1(3i) (Nov-2018)                                                Voice and Unified Communications Devices                                  Cisco Emergency Responder              CSCvm15507 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15507\"]              12.5(1) (Dec-2018)\r\n                                  Cisco Finesse              CSCvk78931 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78931\"]              Consult the Cisco bug ID for details\r\n                                  Cisco IP Phone 7800 Series with Multiplatform Firmware              CSCvm24442 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm24442\"]              11.2.3 (Jan-2019)\r\n                                  Cisco IP Phone 7800 Series              CSCvm15510 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15510\"]              12.5 (Nov-2018)                                  Cisco IP Phone 7832 with Multiplatform Firmware              CSCvm24440 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm24440\"]              11.2.3 (Jan-2019)\r\n                                  Cisco IP Phone 8800 Series with Multiplatform Firmware              CSCvm24436 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm24436\"]              11.2.3 (Jan-2019)\r\n                                  Cisco IP Phone 8800 Series              CSCvm21280 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm21280\"]              12.5 (Nov-2018)                                  Cisco MediaSense              CSCvk78932 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78932\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Paging Server              CSCvm15509 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15509\"]              12.5.1 (Nov-2018)                                  Cisco Unified Communications Domain Manager              CSCvm15505 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15505\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Unified Communications Manager IM \u0026 Presence Service (formerly CUPS)              CSCvm15508 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15508\"]              12.5(1) (Dec-2018)\r\n                                  Cisco Unified Communications Manager Session Management Edition              CSCvm15503 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15503\"]              12.5(1) (Dec-2018)\r\n                                  Cisco Unified Communications Manager              CSCvm15503 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15503\"]              12.5(1) (Dec-2018)\r\n                                  Cisco Unified Contact Center Enterprise - Live Data server              CSCvk78928 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78928\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Unified Contact Center Express              CSCvm15506 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15506\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Unified Intelligence Center              CSCvk78927 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78927\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Unity Connection              CSCvm15803 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15803\"]              12.5(1) (Dec-2018)\r\n                                  Cisco Virtualized Voice Browser              CSCvk78933 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78933\"]              Consult the Cisco bug ID for details\r\n                                  Cisco Webex Hybrid Data Security Node              CSCvm49452 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm49452\"]              Cisco will update affected systems (Nov-2018)\r\n                                  Cisco Webex Meetings Server              CSCvm44844 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm44844\"]              2.8 MR3 (Nov-2018)                                  Cisco Webex Video Mesh Node              CSCvm44845 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm44845\"]              Cisco will update affected systems (Nov-2018)\r\n                                  Video, Streaming, TelePresence, and Transcoding Devices                                  Cisco Expressway Series              CSCvm15491 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15491\"]              x12.5 (Jan-2019)\r\n                                  Cisco Meeting Management              CSCvm15483 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15483\"]              Consult the Cisco bug ID for details\r\n                                  Cisco TelePresence Conductor              CSCvm15486 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15486\"]              Consult the Cisco bug ID for details\r\n                                  Cisco TelePresence Integrator C Series              CSCvm15489 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489\"]              TC7.3.15 (Sep-2018)                                  Cisco TelePresence MX Series              CSCvm15489 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489\"]              TC7.3.15 (Sep-2018)\r\nCE9.5.0  (Sep-2018)                                  Cisco TelePresence Profile Series              CSCvm15489 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489\"]              TC7.3.15 (Sep-2018)                                  Cisco TelePresence SX80 Codec              CSCvm15489 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489\"]              TC7.3.15 (Sep-2018)\r\nCE9.5.0  (Sep-2018)                                  Cisco TelePresence Server on Virtual Machine              CSCvm15490 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15490\"]              Consult the Cisco bug ID for details\r\n                                  Cisco TelePresence System EX Series              CSCvm15489 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489\"]              TC7.3.15 (Sep-2018)                                  Cisco TelePresence Video Communication Server (VCS)              CSCvm15491 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15491\"]              x12.5 (Jan-2019)\r\n                                  Cisco Video Surveillance 8000 Series IP Cameras              CSCvm15494 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15494\"]              1.0.5-3 (Oct-2018)\r\n                                  Cisco Webex Room Kit              CSCvm15489 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489\"]              CE9.5.0  (Sep-2018)                                  Wireless                                  Cisco Aironet 1560 Series Access Points              CSCvm15469 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15469\"]              8.5 MR4 (Oct-2018)\r\n8.8 MR1 (Oct-2018)\r\n8.9 (Feb-2019)\r\n                                  Cisco Aironet 1815 Series Access Points              CSCvm15469 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15469\"]              8.5 MR4 (Oct-2018)\r\n8.8 MR1 (Oct-2018)\r\n8.9 (Feb-2019)\r\n                                  Cisco Aironet 2800 Series Access Points              CSCvm15469 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15469\"]              8.5 MR4 (Oct-2018)\r\n8.8 MR1 (Oct-2018)\r\n8.9 (Feb-2019)\r\n                                  Cisco Aironet 3800 Series Access Points              CSCvm15469 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15469\"]              8.5 MR4 (Oct-2018)\r\n8.8 MR1 (Oct-2018)\r\n8.9 (Feb-2019)\r\n                                  Cisco Mobility Services Engine              CSCvm15476 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15476\"]              CMX 10.6 (Jan-2019)\r\n                                  Cisco Wireless LAN Controller (WLC 5520, WLC 8540, WLC 3504, Virtual Wireless Controller)              CSCvm76255 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm76255\"]              Consult the Cisco bug ID for details",
        "title": "Vulnerable Products"
      },
      {
        "category": "general",
        "text": "Only products and services listed in the \u201cVulnerable Products\u201d section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect the following products and services.\r\n  Network and Content Security Devices\r\n\r\nCisco Adaptive Security Appliance (ASA) Software\r\nCisco Adaptive Security Virtual Appliance (ASAv)\r\nNetwork Management and Provisioning\r\n\r\nCisco Prime Optical\r\nRouting and Switching - Enterprise and Service Provider\r\n\r\nCisco ASR 5000 Series Routers\r\nCisco IOS XRv 9000 Router, Cisco ASR 9000 Series Aggregation Services Routers - Running Cisco IOS XR 64-bit (eXR) Software\r\nCisco Network Convergence System 1000 Series Routers\r\nCisco Network Convergence System 5000 Series Routers\r\nCisco Network Convergence System 5500 Series Routers\r\nCisco Network Convergence System 6000 Series Routers\r\nCisco Nexus 1000V Series Switches\r\nUnified Computing\r\n\r\nCisco UCS Fabric Interconnects\r\nVoice and Unified Communications Devices\r\n\r\nCisco IP Phone 8845 with Multiplatform Firmware\r\nCisco IP Phone 8865 with Multiplatform Firmware\r\nCisco Unified IP 8831 Conference Phone for Third-Party Call Control\r\nCisco Wireless IP Phone 8821\r\nWireless\r\n\r\nCisco Aironet 1810 Series OfficeExtend Access Points\r\nCisco Aironet 1810w Series Access Points\r\nCisco Aironet 1830 Series Access Points\r\nCisco Aironet 1850 Series Access Points",
        "title": "Products Confirmed Not Vulnerable"
      },
      {
        "category": "general",
        "text": "Any workarounds will be documented in product-specific Cisco bugs, which are identified in the \u201cVulnerable Products\u201d section of this advisory.\r\n\r\nIn many cases, platform-dependent workarounds may be available. Administrators may be able to leverage access control lists (ACLs), Control Plane Policing (CoPP), or other rate limiting measures to control the flow of fragmented packets that reach an affected interface. Off-device mitigations, such as external firewalls or infrastructure ACLs on edge devices, may also effectively control the flow of IP fragments that are directed to management interfaces or control planes of downstream affected devices.",
        "title": "Workarounds"
      },
      {
        "category": "general",
        "text": "For information about fixed software releases, consult the Cisco bugs identified in the \u201cVulnerable Products\u201d section of this advisory.\r\n\r\nWhen considering software upgrades, customers are advised to  regularly consult the advisories for Cisco products, which are available  from the Cisco Security Advisories and Alerts page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded  contain sufficient memory and confirm that current hardware and  software configurations will continue to be supported properly by the  new release. If the information is not clear, customers are advised to  contact the Cisco TAC or their contracted maintenance providers.",
        "title": "Fixed Software"
      },
      {
        "category": "general",
        "text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
        "title": "Vulnerability Policy"
      },
      {
        "category": "general",
        "text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any malicious use of the vulnerability that is described in this advisory.",
        "title": "Exploitation and Public Announcements"
      },
      {
        "category": "general",
        "text": "This vulnerability was reported by Juha-Matti Tilli, of the Aalto University Department of Communications and Networking, and Nokia Bell Labs.",
        "title": "Source"
      },
      {
        "category": "legal_disclaimer",
        "text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
        "title": "Legal Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "Emergency Support:\r\n+1 877 228 7302 (toll-free within North America)\r\n+1 408 525 6532 (International direct-dial)\r\nNon-emergency Support:\r\nEmail: psirt@cisco.com\r\nSupport requests that are received via e-mail are typically acknowledged within 48 hours.",
      "issuing_authority": "Cisco product security incident response is the responsibility of the Cisco Product Security Incident Response Team (PSIRT). The Cisco PSIRT is a dedicated, global team that manages the receipt, investigation, and public reporting of security vulnerability information that is related to Cisco products and networks. The on-call Cisco PSIRT works 24x7 with Cisco customers, independent security researchers, consultants, industry organizations, and other vendors to identify possible security issues with Cisco products and networks.\r\nMore information can be found in Cisco Security Vulnerability Policy available at https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html",
      "name": "Cisco",
      "namespace": "https://wwww.cisco.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Linux Kernel IP Fragment Reassembly Denial of Service Vulnerability Affecting Cisco Products: August 2018",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-ip-fragment"
      },
      {
        "category": "external",
        "summary": "Cisco Security Vulnerability Policy",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
      },
      {
        "category": "external",
        "summary": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-ip-fragment",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180824-linux-ip-fragment"
      },
      {
        "category": "external",
        "summary": "Cisco Bug Search Tool",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/BUGID"
      },
      {
        "category": "external",
        "summary": "CSCvk78929",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78929"
      },
      {
        "category": "external",
        "summary": "CSCvm15451",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15451"
      },
      {
        "category": "external",
        "summary": "CSCvm15463",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15463"
      },
      {
        "category": "external",
        "summary": "CSCvm15501",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15501"
      },
      {
        "category": "external",
        "summary": "CSCvm15501",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15501"
      },
      {
        "category": "external",
        "summary": "CSCvm15501",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15501"
      },
      {
        "category": "external",
        "summary": "CSCvm15501",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15501"
      },
      {
        "category": "external",
        "summary": "CSCvm15501",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15501"
      },
      {
        "category": "external",
        "summary": "CSCvm56669",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm56669"
      },
      {
        "category": "external",
        "summary": "CSCvm10968",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm10968"
      },
      {
        "category": "external",
        "summary": "CSCvm10968",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm10968"
      },
      {
        "category": "external",
        "summary": "CSCvm05464",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm05464"
      },
      {
        "category": "external",
        "summary": "CSCvm21278",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm21278"
      },
      {
        "category": "external",
        "summary": "CSCvm15495",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15495"
      },
      {
        "category": "external",
        "summary": "CSCvm09119",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm09119"
      },
      {
        "category": "external",
        "summary": "CSCvm15448",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15448"
      },
      {
        "category": "external",
        "summary": "CSCvm15497",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15497"
      },
      {
        "category": "external",
        "summary": "CSCvm40406",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm40406"
      },
      {
        "category": "external",
        "summary": "CSCvm59990",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm59990"
      },
      {
        "category": "external",
        "summary": "CSCvm15475",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15475"
      },
      {
        "category": "external",
        "summary": "CSCvm15467",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15467"
      },
      {
        "category": "external",
        "summary": "CSCvm18160",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm18160"
      },
      {
        "category": "external",
        "summary": "CSCvm15488",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15488"
      },
      {
        "category": "external",
        "summary": "CSCvm15477",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15477"
      },
      {
        "category": "external",
        "summary": "CSCvm15802",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15802"
      },
      {
        "category": "external",
        "summary": "CSCvm15480",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15480"
      },
      {
        "category": "external",
        "summary": "CSCvm15504",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15504"
      },
      {
        "category": "external",
        "summary": "CSCvm15479",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15479"
      },
      {
        "category": "external",
        "summary": "CSCvm15478",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15478"
      },
      {
        "category": "external",
        "summary": "CSCvm15471",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15471"
      },
      {
        "category": "external",
        "summary": "CSCvm15492",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15492"
      },
      {
        "category": "external",
        "summary": "CSCvm21613",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm21613"
      },
      {
        "category": "external",
        "summary": "CSCvm21614",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm21614"
      },
      {
        "category": "external",
        "summary": "CSCvm15456",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15456"
      },
      {
        "category": "external",
        "summary": "CSCvm15473",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15473"
      },
      {
        "category": "external",
        "summary": "CSCvm15454",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15454"
      },
      {
        "category": "external",
        "summary": "CSCvm15474",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15474"
      },
      {
        "category": "external",
        "summary": "CSCvm09121",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm09121"
      },
      {
        "category": "external",
        "summary": "CSCvm15498",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15498"
      },
      {
        "category": "external",
        "summary": "CSCvm15459",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15459"
      },
      {
        "category": "external",
        "summary": "CSCvm15450",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15450"
      },
      {
        "category": "external",
        "summary": "CSCvm09117",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm09117"
      },
      {
        "category": "external",
        "summary": "CSCvm15461",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15461"
      },
      {
        "category": "external",
        "summary": "CSCvm15457",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15457"
      },
      {
        "category": "external",
        "summary": "CSCvm09117",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm09117"
      },
      {
        "category": "external",
        "summary": "CSCvn69988",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvn69988"
      },
      {
        "category": "external",
        "summary": "CSCvm15800",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15800"
      },
      {
        "category": "external",
        "summary": "CSCvm18261",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm18261"
      },
      {
        "category": "external",
        "summary": "CSCvm15466",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15466"
      },
      {
        "category": "external",
        "summary": "CSCvm15507",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15507"
      },
      {
        "category": "external",
        "summary": "CSCvk78931",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78931"
      },
      {
        "category": "external",
        "summary": "CSCvm24442",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm24442"
      },
      {
        "category": "external",
        "summary": "CSCvm15510",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15510"
      },
      {
        "category": "external",
        "summary": "CSCvm24440",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm24440"
      },
      {
        "category": "external",
        "summary": "CSCvm24436",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm24436"
      },
      {
        "category": "external",
        "summary": "CSCvm21280",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm21280"
      },
      {
        "category": "external",
        "summary": "CSCvk78932",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78932"
      },
      {
        "category": "external",
        "summary": "CSCvm15509",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15509"
      },
      {
        "category": "external",
        "summary": "CSCvm15505",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15505"
      },
      {
        "category": "external",
        "summary": "CSCvm15508",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15508"
      },
      {
        "category": "external",
        "summary": "CSCvm15503",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15503"
      },
      {
        "category": "external",
        "summary": "CSCvm15503",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15503"
      },
      {
        "category": "external",
        "summary": "CSCvk78928",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78928"
      },
      {
        "category": "external",
        "summary": "CSCvm15506",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15506"
      },
      {
        "category": "external",
        "summary": "CSCvk78927",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78927"
      },
      {
        "category": "external",
        "summary": "CSCvm15803",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15803"
      },
      {
        "category": "external",
        "summary": "CSCvk78933",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk78933"
      },
      {
        "category": "external",
        "summary": "CSCvm49452",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm49452"
      },
      {
        "category": "external",
        "summary": "CSCvm44844",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm44844"
      },
      {
        "category": "external",
        "summary": "CSCvm44845",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm44845"
      },
      {
        "category": "external",
        "summary": "CSCvm15491",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15491"
      },
      {
        "category": "external",
        "summary": "CSCvm15483",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15483"
      },
      {
        "category": "external",
        "summary": "CSCvm15486",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15486"
      },
      {
        "category": "external",
        "summary": "CSCvm15489",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489"
      },
      {
        "category": "external",
        "summary": "CSCvm15489",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489"
      },
      {
        "category": "external",
        "summary": "CSCvm15489",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489"
      },
      {
        "category": "external",
        "summary": "CSCvm15489",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489"
      },
      {
        "category": "external",
        "summary": "CSCvm15490",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15490"
      },
      {
        "category": "external",
        "summary": "CSCvm15489",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489"
      },
      {
        "category": "external",
        "summary": "CSCvm15491",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15491"
      },
      {
        "category": "external",
        "summary": "CSCvm15494",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15494"
      },
      {
        "category": "external",
        "summary": "CSCvm15489",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15489"
      },
      {
        "category": "external",
        "summary": "CSCvm15469",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15469"
      },
      {
        "category": "external",
        "summary": "CSCvm15469",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15469"
      },
      {
        "category": "external",
        "summary": "CSCvm15469",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15469"
      },
      {
        "category": "external",
        "summary": "CSCvm15469",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15469"
      },
      {
        "category": "external",
        "summary": "CSCvm15476",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm15476"
      },
      {
        "category": "external",
        "summary": "CSCvm76255",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm76255"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisories and Alerts page",
        "url": "https://www.cisco.com/go/psirt"
      },
      {
        "category": "external",
        "summary": "Security Vulnerability Policy",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
      }
    ],
    "title": "Linux Kernel IP Fragment Reassembly Denial of Service Vulnerability Affecting Cisco Products: August 2018",
    "tracking": {
      "current_release_date": "2019-02-18T16:35:00+00:00",
      "generator": {
        "date": "2022-10-22T03:01:20+00:00",
        "engine": {
          "name": "TVCE"
        }
      },
      "id": "cisco-sa-20180824-linux-ip-fragment",
      "initial_release_date": "2018-08-24T21:30:00+00:00",
      "revision_history": [
        {
          "date": "2018-08-24T21:31:52+00:00",
          "number": "1.0.0",
          "summary": "Initial public release."
        },
        {
          "date": "2018-08-28T19:23:13+00:00",
          "number": "1.1.0",
          "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable."
        },
        {
          "date": "2018-08-29T18:19:25+00:00",
          "number": "1.2.0",
          "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable. Updated information about fixed release availability."
        },
        {
          "date": "2018-08-30T17:23:22+00:00",
          "number": "1.3.0",
          "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable. Updated information about fixed release availability."
        },
        {
          "date": "2018-09-04T18:38:15+00:00",
          "number": "1.4.0",
          "summary": "Updated the lists of products under investigation and vulnerable products."
        },
        {
          "date": "2018-09-06T20:10:55+00:00",
          "number": "1.5.0",
          "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable. Updated information about fixed release availability."
        },
        {
          "date": "2018-09-10T20:06:21+00:00",
          "number": "1.6.0",
          "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable. Updated information about fixed release availability."
        },
        {
          "date": "2018-09-13T18:41:23+00:00",
          "number": "1.7.0",
          "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable. Updated information about fixed release availability."
        },
        {
          "date": "2018-09-17T20:43:23+00:00",
          "number": "1.8.0",
          "summary": "Updated the lists of products under investigation and vulnerable products."
        },
        {
          "date": "2018-09-24T17:01:46+00:00",
          "number": "1.9.0",
          "summary": "Updated the lists of products under investigation, vulnerable products, and products confirmed not vulnerable. Updated information about fixed release availability."
        },
        {
          "date": "2018-09-27T19:16:04+00:00",
          "number": "1.10.0",
          "summary": "Updated information about fixed release availability."
        },
        {
          "date": "2018-10-04T17:45:17+00:00",
          "number": "1.11.0",
          "summary": "Updated the lists of products under investigation and vulnerable products. Updated information about fixed release availability."
        },
        {
          "date": "2018-10-11T20:19:27+00:00",
          "number": "1.12.0",
          "summary": "Updated information about fixed release availability."
        },
        {
          "date": "2018-10-19T17:52:10+00:00",
          "number": "1.13.0",
          "summary": "Updated information about fixed release availability."
        },
        {
          "date": "2018-10-25T18:35:27+00:00",
          "number": "1.14.0",
          "summary": "Updated information about fixed release availability."
        },
        {
          "date": "2018-11-06T18:17:10+00:00",
          "number": "1.15.0",
          "summary": "Updated information about fixed release availability. Removed references to ongoing investigation."
        },
        {
          "date": "2019-02-18T16:35:18+00:00",
          "number": "1.16.0",
          "summary": "Updated information about fixed release availability for Cisco FireSIGHT System Software, Cisco Firepower Management Center, and Cisco Enterprise NFV Infrastructure Software (NFVIS)."
        }
      ],
      "status": "final",
      "version": "1.16.0"
    }
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-5391",
      "notes": [
        {
          "category": "general",
          "text": "No additional information for this vulneraiblity is currently avaialbe.",
          "title": "No Notes"
        }
      ],
      "release_date": "2018-08-20T11:20:00+00:00",
      "remediations": [
        {
          "category": "workaround",
          "details": "Any workarounds will be documented in product-specific Cisco bugs, which are identified in the \u201cVulnerable Products\u201d section of this advisory.\r\n\r\nIn many cases, platform-dependent workarounds may be available. Administrators may be able to leverage access control lists (ACLs), Control Plane Policing (CoPP), or other rate limiting measures to control the flow of fragmented packets that reach an affected interface. Off-device mitigations, such as external firewalls or infrastructure ACLs on edge devices, may also effectively control the flow of IP fragments that are directed to management interfaces or control planes of downstream affected devices."
        }
      ],
      "title": "Linux Kernel IP Fragment Reassembly Denial of Service Vulnerability Affecting Cisco Products: August 2018"
    }
  ]
}