cnvd-2017-32478
Vulnerability from cnvd
Title
Cisco ASR 5500 System Architecture Evolution Gateway拒绝服务漏洞
Description
Cisco ASR 5500 System Architecture Evolution (SAE) Gateways是美国思科（Cisco）公司的一款网关设备。General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler是其中的一个通用分组无线业务通道协议入口包处理程序。 Cisco ASR 5500 SAE Gateways中的GPRS Tunneling Protocol ingress packet handler存在拒绝服务漏洞，该漏洞源于程序未能正确的对GPRS Tunneling Protocol数据包包头执行输入验证。远程攻击者可通过发送畸形的GPRS Tunneling Protocol数据包利用该漏洞造成设备重启，导致拒绝服务。
Severity
中
Patch Name
Cisco ASR 5500 System Architecture Evolution Gateway拒绝服务漏洞的补丁
Patch Description
Cisco ASR 5500 System Architecture Evolution (SAE) Gateways是美国思科（Cisco）公司的一款网关设备。General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler是其中的一个通用分组无线业务通道协议入口包处理程序。 Cisco ASR 5500 SAE Gateways中的GPRS Tunneling Protocol ingress packet handler存在拒绝服务漏洞，该漏洞源于程序未能正确的对GPRS Tunneling Protocol数据包包头执行输入验证。远程攻击者可通过发送畸形的GPRS Tunneling Protocol数据包利用该漏洞造成设备重启，导致拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve07119

Reference
https://nvd.nist.gov/vuln/detail/CVE-2017-12217 http://www.securityfocus.com/bid/100642
Impacted products
Name
['Cisco ASR 5000 Series 21.3.0', 'Cisco ASR 5000 Series 21.2.2', 'Cisco ASR 5000 Series 19.6.1']
Show details on source website

To clipboard 

{
  "bids": {
    "bid": {
      "bidNumber": "100642"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2017-12217"
    }
  },
  "description": "Cisco ASR 5500 System Architecture Evolution (SAE) Gateways\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u7f51\u5173\u8bbe\u5907\u3002General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u901a\u7528\u5206\u7ec4\u65e0\u7ebf\u4e1a\u52a1\u901a\u9053\u534f\u8bae\u5165\u53e3\u5305\u5904\u7406\u7a0b\u5e8f\u3002\r\n\r\nCisco ASR 5500 SAE Gateways\u4e2d\u7684GPRS Tunneling Protocol ingress packet handler\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u5bf9GPRS Tunneling Protocol\u6570\u636e\u5305\u5305\u5934\u6267\u884c\u8f93\u5165\u9a8c\u8bc1\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7578\u5f62\u7684GPRS Tunneling Protocol\u6570\u636e\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u8bbe\u5907\u91cd\u542f\uff0c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://bst.cloudapps.cisco.com/bugsearch/bug/CSCve07119",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-32478",
  "openTime": "2017-11-02",
  "patchDescription": "Cisco ASR 5500 System Architecture Evolution (SAE) Gateways\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u7f51\u5173\u8bbe\u5907\u3002General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u901a\u7528\u5206\u7ec4\u65e0\u7ebf\u4e1a\u52a1\u901a\u9053\u534f\u8bae\u5165\u53e3\u5305\u5904\u7406\u7a0b\u5e8f\u3002\r\n\r\nCisco ASR 5500 SAE Gateways\u4e2d\u7684GPRS Tunneling Protocol ingress packet handler\u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u5bf9GPRS Tunneling Protocol\u6570\u636e\u5305\u5305\u5934\u6267\u884c\u8f93\u5165\u9a8c\u8bc1\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7578\u5f62\u7684GPRS Tunneling Protocol\u6570\u636e\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u8bbe\u5907\u91cd\u542f\uff0c\u5bfc\u81f4\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco ASR 5500 System Architecture Evolution Gateway\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco ASR 5000 Series 21.3.0",
      "Cisco ASR 5000 Series 21.2.2",
      "Cisco ASR 5000 Series 19.6.1"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2017-12217\r\nhttp://www.securityfocus.com/bid/100642",
  "serverity": "\u4e2d",
  "submitTime": "2017-09-08",
  "title": "Cisco ASR 5500 System Architecture Evolution Gateway\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.