cnvd - cnvd-2018-09783

cnvd-2018-09783

Vulnerability from cnvd

Title: Cisco ASR 5000系列路由器拒绝服务漏洞

Description:

Cisco Aggregation Services Router（ASR）5000 Series Routers和Virtualized Packet Core（VPC）System Software都是美国思科（Cisco）公司的产品。Cisco Aggregation Services Router（ASR）5000 Series Routers是一款5000系列的安全路由器设备。Virtualized Packet Core（VPC）System Software是一套被部署在专用硬件平台的StarOS软件的产品化版本。StarOS是使用在其中的一套操作系统。IPsec Manager是其中的一个IPsec管理器。

Cisco ASR 5000 Series Routers和VPC System Software上的StarOS的IPsec Manager存在资源管理错误漏洞，该漏洞源于程序未能正确的处理损坏的互联网密钥交换协议2版本（IKEv2）消息。远程攻击者可通过发送特制的IKEv2消息利用该漏洞终止任意活动的IPsec VPN通道并阻止新的IPsec VPN通道建立。

Severity: 中

Patch Name: Cisco ASR 5000系列路由器拒绝服务漏洞的补丁

Patch Description:

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasr

Reference: http://www.securityfocus.com/bid/103935

Impacted products

Name
['Cisco VPC System Software', 'Cisco ASR 5000 Series Routers']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "103935"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0273"
    }
  },
  "description": "Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u548cVirtualized Packet Core\uff08VPC\uff09System Software\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u662f\u4e00\u6b3e5000\u7cfb\u5217\u7684\u5b89\u5168\u8def\u7531\u5668\u8bbe\u5907\u3002Virtualized Packet Core\uff08VPC\uff09System Software\u662f\u4e00\u5957\u88ab\u90e8\u7f72\u5728\u4e13\u7528\u786c\u4ef6\u5e73\u53f0\u7684StarOS\u8f6f\u4ef6\u7684\u4ea7\u54c1\u5316\u7248\u672c\u3002StarOS\u662f\u4f7f\u7528\u5728\u5176\u4e2d\u7684\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u3002IPsec Manager\u662f\u5176\u4e2d\u7684\u4e00\u4e2aIPsec\u7ba1\u7406\u5668\u3002\r\n\r\nCisco ASR 5000 Series Routers\u548cVPC System Software\u4e0a\u7684StarOS\u7684IPsec Manager\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u5904\u7406\u635f\u574f\u7684\u4e92\u8054\u7f51\u5bc6\u94a5\u4ea4\u6362\u534f\u8bae2\u7248\u672c\uff08IKEv2\uff09\u6d88\u606f\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684IKEv2\u6d88\u606f\u5229\u7528\u8be5\u6f0f\u6d1e\u7ec8\u6b62\u4efb\u610f\u6d3b\u52a8\u7684IPsec VPN\u901a\u9053\u5e76\u963b\u6b62\u65b0\u7684IPsec VPN\u901a\u9053\u5efa\u7acb\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasr",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-09783",
  "openTime": "2018-05-18",
  "patchDescription": "Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u548cVirtualized Packet Core\uff08VPC\uff09System Software\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u662f\u4e00\u6b3e5000\u7cfb\u5217\u7684\u5b89\u5168\u8def\u7531\u5668\u8bbe\u5907\u3002Virtualized Packet Core\uff08VPC\uff09System Software\u662f\u4e00\u5957\u88ab\u90e8\u7f72\u5728\u4e13\u7528\u786c\u4ef6\u5e73\u53f0\u7684StarOS\u8f6f\u4ef6\u7684\u4ea7\u54c1\u5316\u7248\u672c\u3002StarOS\u662f\u4f7f\u7528\u5728\u5176\u4e2d\u7684\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u3002IPsec Manager\u662f\u5176\u4e2d\u7684\u4e00\u4e2aIPsec\u7ba1\u7406\u5668\u3002\r\n\r\nCisco ASR 5000 Series Routers\u548cVPC System Software\u4e0a\u7684StarOS\u7684IPsec Manager\u5b58\u5728\u8d44\u6e90\u7ba1\u7406\u9519\u8bef\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u5904\u7406\u635f\u574f\u7684\u4e92\u8054\u7f51\u5bc6\u94a5\u4ea4\u6362\u534f\u8bae2\u7248\u672c\uff08IKEv2\uff09\u6d88\u606f\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684IKEv2\u6d88\u606f\u5229\u7528\u8be5\u6f0f\u6d1e\u7ec8\u6b62\u4efb\u610f\u6d3b\u52a8\u7684IPsec VPN\u901a\u9053\u5e76\u963b\u6b62\u65b0\u7684IPsec VPN\u901a\u9053\u5efa\u7acb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco ASR 5000\u7cfb\u5217\u8def\u7531\u5668\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco VPC System Software",
      "Cisco ASR 5000 Series Routers"
    ]
  },
  "referenceLink": "http://www.securityfocus.com/bid/103935",
  "serverity": "\u4e2d",
  "submitTime": "2018-04-23",
  "title": "Cisco ASR 5000\u7cfb\u5217\u8def\u7531\u5668\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2018-0273 (GCVE-0-2018-0273)

Vulnerability from cvelistv5

Published

2018-04-19 20:00

Modified

2024-11-29 15:14

Severity ?

CWE

CWE-399

Summary

A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from being established, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of corrupted Internet Key Exchange Version 2 (IKEv2) messages. An attacker could exploit this vulnerability by sending crafted IKEv2 messages toward an affected router. A successful exploit could allow the attacker to cause the ipsecmgr service to reload. A reload of this service could cause all IPsec VPN tunnels to be terminated and prevent new tunnels from being established until the service has restarted, resulting in a DoS condition. This vulnerability affects the following Cisco products when they are running Cisco StarOS: Cisco Aggregation Services Router (ASR) 5000 Series Routers, Virtualized Packet Core (VPC) System Software. Cisco Bug IDs: CSCve29605.

References

▼	URL	Tags
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasr	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/103935	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1040721	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	n/a	Cisco StarOS IPsec Manager	Version: Cisco StarOS IPsec Manager

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:21:14.988Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasr"
          },
          {
            "name": "103935",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103935"
          },
          {
            "name": "1040721",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040721"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-0273",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-29T14:44:16.637094Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-29T15:14:24.897Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco StarOS IPsec Manager",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Cisco StarOS IPsec Manager"
            }
          ]
        }
      ],
      "datePublic": "2018-04-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from being established, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of corrupted Internet Key Exchange Version 2 (IKEv2) messages. An attacker could exploit this vulnerability by sending crafted IKEv2 messages toward an affected router. A successful exploit could allow the attacker to cause the ipsecmgr service to reload. A reload of this service could cause all IPsec VPN tunnels to be terminated and prevent new tunnels from being established until the service has restarted, resulting in a DoS condition. This vulnerability affects the following Cisco products when they are running Cisco StarOS: Cisco Aggregation Services Router (ASR) 5000 Series Routers, Virtualized Packet Core (VPC) System Software. Cisco Bug IDs: CSCve29605."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-399",
              "description": "CWE-399",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-21T09:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasr"
        },
        {
          "name": "103935",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103935"
        },
        {
          "name": "1040721",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040721"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2018-0273",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco StarOS IPsec Manager",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Cisco StarOS IPsec Manager"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from being established, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of corrupted Internet Key Exchange Version 2 (IKEv2) messages. An attacker could exploit this vulnerability by sending crafted IKEv2 messages toward an affected router. A successful exploit could allow the attacker to cause the ipsecmgr service to reload. A reload of this service could cause all IPsec VPN tunnels to be terminated and prevent new tunnels from being established until the service has restarted, resulting in a DoS condition. This vulnerability affects the following Cisco products when they are running Cisco StarOS: Cisco Aggregation Services Router (ASR) 5000 Series Routers, Virtualized Packet Core (VPC) System Software. Cisco Bug IDs: CSCve29605."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-399"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasr",
              "refsource": "CONFIRM",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasr"
            },
            {
              "name": "103935",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103935"
            },
            {
              "name": "1040721",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040721"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-0273",
    "datePublished": "2018-04-19T20:00:00",
    "dateReserved": "2017-11-27T00:00:00",
    "dateUpdated": "2024-11-29T15:14:24.897Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted