cnvd - cnvd-2018-09782

cnvd-2018-09782

Vulnerability from cnvd

Title: Cisco ASR 5700系列路由器输入验证漏洞

Description:

Cisco Aggregation Services Router（ASR）5000 Series Routers和Virtualized Packet Core（VPC）System Software都是美国思科（Cisco）公司的产品。Cisco Aggregation Services Router（ASR）5000 Series Routers是一款5000系列的安全路由器设备。Virtualized Packet Core（VPC）System Software是一套被部署在专用硬件平台的StarOS软件的产品化版本。StarOS是使用在其中的一套操作系统。

Cisco ASR 5700 Series和VPC System Software中的StarOS存在输入验证漏洞，该漏洞源于程序未能正确的校验传输数据包的长度是否超过了网卡所支持的最大长度。远程攻击者可通过发送特制的数据包或大量特制的IP片段利用该漏洞造成界面无法发送数据包。

Severity: 高

Patch Name: Cisco ASR 5700系列路由器输入验证漏洞的补丁

Patch Description:

Cisco ASR 5700 Series和VPC System Software中的StarOS存在输入验证漏洞，该漏洞源于程序未能正确的校验传输数据包的长度是否超过了网卡所支持的最大长度。远程攻击者可通过发送特制的数据包或大量特制的IP片段利用该漏洞造成界面无法发送数据包。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros

Reference: https://www.securityfocus.com/bid/103923

Impacted products

Name
['Cisco Aggregation Services Router (ASR) 5700 Series', 'Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) System Software', 'Cisco Virtualized Packet Core-Single Instance (VPC-SI) System Software']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0239"
    }
  },
  "description": "Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u548cVirtualized Packet Core\uff08VPC\uff09System Software\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u662f\u4e00\u6b3e5000\u7cfb\u5217\u7684\u5b89\u5168\u8def\u7531\u5668\u8bbe\u5907\u3002Virtualized Packet Core\uff08VPC\uff09System Software\u662f\u4e00\u5957\u88ab\u90e8\u7f72\u5728\u4e13\u7528\u786c\u4ef6\u5e73\u53f0\u7684StarOS\u8f6f\u4ef6\u7684\u4ea7\u54c1\u5316\u7248\u672c\u3002StarOS\u662f\u4f7f\u7528\u5728\u5176\u4e2d\u7684\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nCisco ASR 5700 Series\u548cVPC System Software\u4e2d\u7684StarOS\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u6821\u9a8c\u4f20\u8f93\u6570\u636e\u5305\u7684\u957f\u5ea6\u662f\u5426\u8d85\u8fc7\u4e86\u7f51\u5361\u6240\u652f\u6301\u7684\u6700\u5927\u957f\u5ea6\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684\u6570\u636e\u5305\u6216\u5927\u91cf\u7279\u5236\u7684IP\u7247\u6bb5\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u754c\u9762\u65e0\u6cd5\u53d1\u9001\u6570\u636e\u5305\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-09782",
  "openTime": "2018-05-18",
  "patchDescription": "Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u548cVirtualized Packet Core\uff08VPC\uff09System Software\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u662f\u4e00\u6b3e5000\u7cfb\u5217\u7684\u5b89\u5168\u8def\u7531\u5668\u8bbe\u5907\u3002Virtualized Packet Core\uff08VPC\uff09System Software\u662f\u4e00\u5957\u88ab\u90e8\u7f72\u5728\u4e13\u7528\u786c\u4ef6\u5e73\u53f0\u7684StarOS\u8f6f\u4ef6\u7684\u4ea7\u54c1\u5316\u7248\u672c\u3002StarOS\u662f\u4f7f\u7528\u5728\u5176\u4e2d\u7684\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nCisco ASR 5700 Series\u548cVPC System Software\u4e2d\u7684StarOS\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u6821\u9a8c\u4f20\u8f93\u6570\u636e\u5305\u7684\u957f\u5ea6\u662f\u5426\u8d85\u8fc7\u4e86\u7f51\u5361\u6240\u652f\u6301\u7684\u6700\u5927\u957f\u5ea6\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684\u6570\u636e\u5305\u6216\u5927\u91cf\u7279\u5236\u7684IP\u7247\u6bb5\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u754c\u9762\u65e0\u6cd5\u53d1\u9001\u6570\u636e\u5305\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco ASR 5700\u7cfb\u5217\u8def\u7531\u5668\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Aggregation Services Router (ASR) 5700 Series",
      "Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) System Software",
      "Cisco Virtualized Packet Core-Single Instance (VPC-SI) System Software"
    ]
  },
  "referenceLink": "https://www.securityfocus.com/bid/103923",
  "serverity": "\u9ad8",
  "submitTime": "2018-04-23",
  "title": "Cisco ASR 5700\u7cfb\u5217\u8def\u7531\u5668\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e"
}

CVE-2018-0239 (GCVE-0-2018-0239)

Vulnerability from cvelistv5

Published

2018-04-19 20:00

Modified

2024-11-29 15:17

Severity ?

CWE

CWE-20

Summary

A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (ASR) 5700 Series devices and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to cause an interface on the device to cease forwarding packets. The device may need to be manually reloaded to clear this Interface Forwarding Denial of Service condition. The vulnerability is due to the failure to properly check that the length of a packet to transmit does not exceed the maximum supported length of the network interface card (NIC). An attacker could exploit this vulnerability by sending a crafted IP packet or a series of crafted IP fragments through an interface on the targeted device. A successful exploit could allow the attacker to cause the network interface to cease forwarding packets. This vulnerability could be triggered by either IPv4 or IPv6 network traffic. This vulnerability affects the following Cisco products when they are running the StarOS operating system and a virtual interface card is installed on the device: Aggregation Services Router (ASR) 5700 Series, Virtualized Packet Core-Distributed Instance (VPC-DI) System Software, Virtualized Packet Core-Single Instance (VPC-SI) System Software. Cisco Bug IDs: CSCvf32385.

References

▼	URL	Tags
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/103923	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1040720	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	n/a	Cisco StarOS	Version: Cisco StarOS

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:21:13.907Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros"
          },
          {
            "name": "103923",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103923"
          },
          {
            "name": "1040720",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040720"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-0239",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-29T14:44:26.771177Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-29T15:17:20.215Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco StarOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Cisco StarOS"
            }
          ]
        }
      ],
      "datePublic": "2018-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (ASR) 5700 Series devices and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to cause an interface on the device to cease forwarding packets. The device may need to be manually reloaded to clear this Interface Forwarding Denial of Service condition. The vulnerability is due to the failure to properly check that the length of a packet to transmit does not exceed the maximum supported length of the network interface card (NIC). An attacker could exploit this vulnerability by sending a crafted IP packet or a series of crafted IP fragments through an interface on the targeted device. A successful exploit could allow the attacker to cause the network interface to cease forwarding packets. This vulnerability could be triggered by either IPv4 or IPv6 network traffic. This vulnerability affects the following Cisco products when they are running the StarOS operating system and a virtual interface card is installed on the device: Aggregation Services Router (ASR) 5700 Series, Virtualized Packet Core-Distributed Instance (VPC-DI) System Software, Virtualized Packet Core-Single Instance (VPC-SI) System Software. Cisco Bug IDs: CSCvf32385."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-20T09:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros"
        },
        {
          "name": "103923",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103923"
        },
        {
          "name": "1040720",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040720"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2018-0239",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco StarOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Cisco StarOS"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (ASR) 5700 Series devices and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to cause an interface on the device to cease forwarding packets. The device may need to be manually reloaded to clear this Interface Forwarding Denial of Service condition. The vulnerability is due to the failure to properly check that the length of a packet to transmit does not exceed the maximum supported length of the network interface card (NIC). An attacker could exploit this vulnerability by sending a crafted IP packet or a series of crafted IP fragments through an interface on the targeted device. A successful exploit could allow the attacker to cause the network interface to cease forwarding packets. This vulnerability could be triggered by either IPv4 or IPv6 network traffic. This vulnerability affects the following Cisco products when they are running the StarOS operating system and a virtual interface card is installed on the device: Aggregation Services Router (ASR) 5700 Series, Virtualized Packet Core-Distributed Instance (VPC-DI) System Software, Virtualized Packet Core-Single Instance (VPC-SI) System Software. Cisco Bug IDs: CSCvf32385."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros",
              "refsource": "CONFIRM",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros"
            },
            {
              "name": "103923",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103923"
            },
            {
              "name": "1040720",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040720"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-0239",
    "datePublished": "2018-04-19T20:00:00",
    "dateReserved": "2017-11-27T00:00:00",
    "dateUpdated": "2024-11-29T15:17:20.215Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted