Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets that require NAT, aka Bug ID CSCuw85853.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios_xe | Cisco | 3.1.3s (including) | 3.1.3s (including) |
| Ios_xe | Cisco | 3.1.4as (including) | 3.1.4as (including) |
| Ios_xe | Cisco | 3.1.4s (including) | 3.1.4s (including) |
| Ios_xe | Cisco | 3.2.1s (including) | 3.2.1s (including) |
| Ios_xe | Cisco | 3.2.2s (including) | 3.2.2s (including) |
| Ios_xe | Cisco | 3.3.0s (including) | 3.3.0s (including) |
| Ios_xe | Cisco | 3.3.1s (including) | 3.3.1s (including) |
| Ios_xe | Cisco | 3.3.2s (including) | 3.3.2s (including) |
| Ios_xe | Cisco | 3.4.0s (including) | 3.4.0s (including) |
| Ios_xe | Cisco | 3.4.1s (including) | 3.4.1s (including) |
| Ios_xe | Cisco | 3.4.2s (including) | 3.4.2s (including) |
| Ios_xe | Cisco | 3.4.3s (including) | 3.4.3s (including) |
| Ios_xe | Cisco | 3.4.4s (including) | 3.4.4s (including) |
| Ios_xe | Cisco | 3.4.5s (including) | 3.4.5s (including) |
| Ios_xe | Cisco | 3.4.6s (including) | 3.4.6s (including) |
| Ios_xe | Cisco | 3.5.0s (including) | 3.5.0s (including) |
| Ios_xe | Cisco | 3.5.1s (including) | 3.5.1s (including) |
| Ios_xe | Cisco | 3.5.2s (including) | 3.5.2s (including) |
| Ios_xe | Cisco | 3.6.0s (including) | 3.6.0s (including) |
| Ios_xe | Cisco | 3.6.1s (including) | 3.6.1s (including) |
| Ios_xe | Cisco | 3.6.2s (including) | 3.6.2s (including) |
| Ios_xe | Cisco | 3.7.0bs (including) | 3.7.0bs (including) |
| Ios_xe | Cisco | 3.7.0s (including) | 3.7.0s (including) |
| Ios_xe | Cisco | 3.7.1s (including) | 3.7.1s (including) |
| Ios_xe | Cisco | 3.7.2s (including) | 3.7.2s (including) |
| Ios_xe | Cisco | 3.7.2ts (including) | 3.7.2ts (including) |
| Ios_xe | Cisco | 3.7.3s (including) | 3.7.3s (including) |
| Ios_xe | Cisco | 3.7.4as (including) | 3.7.4as (including) |
| Ios_xe | Cisco | 3.7.4s (including) | 3.7.4s (including) |
| Ios_xe | Cisco | 3.7.5s (including) | 3.7.5s (including) |
| Ios_xe | Cisco | 3.7.6s (including) | 3.7.6s (including) |
| Ios_xe | Cisco | 3.7.7s (including) | 3.7.7s (including) |
| Ios_xe | Cisco | 3.8.0s (including) | 3.8.0s (including) |
| Ios_xe | Cisco | 3.8.1s (including) | 3.8.1s (including) |
| Ios_xe | Cisco | 3.8.2s (including) | 3.8.2s (including) |
| Ios_xe | Cisco | 3.9.0as (including) | 3.9.0as (including) |
| Ios_xe | Cisco | 3.9.0s (including) | 3.9.0s (including) |
| Ios_xe | Cisco | 3.9.1as (including) | 3.9.1as (including) |
| Ios_xe | Cisco | 3.9.1s (including) | 3.9.1s (including) |
| Ios_xe | Cisco | 3.9.2s (including) | 3.9.2s (including) |
| Ios_xe | Cisco | 3.10.0s (including) | 3.10.0s (including) |
| Ios_xe | Cisco | 3.10.1s (including) | 3.10.1s (including) |
| Ios_xe | Cisco | 3.10.2s (including) | 3.10.2s (including) |
| Ios_xe | Cisco | 3.10.2ts (including) | 3.10.2ts (including) |
| Ios_xe | Cisco | 3.10.3s (including) | 3.10.3s (including) |
| Ios_xe | Cisco | 3.10.4s (including) | 3.10.4s (including) |
| Ios_xe | Cisco | 3.10.5s (including) | 3.10.5s (including) |
| Ios_xe | Cisco | 3.10.6s (including) | 3.10.6s (including) |
| Ios_xe | Cisco | 3.11.0s (including) | 3.11.0s (including) |
| Ios_xe | Cisco | 3.11.1s (including) | 3.11.1s (including) |
| Ios_xe | Cisco | 3.11.2s (including) | 3.11.2s (including) |
| Ios_xe | Cisco | 3.11.3s (including) | 3.11.3s (including) |
| Ios_xe | Cisco | 3.11.4s (including) | 3.11.4s (including) |
| Ios_xe | Cisco | 3.12.0as (including) | 3.12.0as (including) |
| Ios_xe | Cisco | 3.12.0s (including) | 3.12.0s (including) |
| Ios_xe | Cisco | 3.12.1s (including) | 3.12.1s (including) |
| Ios_xe | Cisco | 3.12.2s (including) | 3.12.2s (including) |
| Ios_xe | Cisco | 3.12.3s (including) | 3.12.3s (including) |
| Ios_xe | Cisco | 3.12.4s (including) | 3.12.4s (including) |
| Ios_xe | Cisco | 3.13.0as (including) | 3.13.0as (including) |
| Ios_xe | Cisco | 3.13.0s (including) | 3.13.0s (including) |
| Ios_xe | Cisco | 3.13.1s (including) | 3.13.1s (including) |
| Ios_xe | Cisco | 3.13.2as (including) | 3.13.2as (including) |
| Ios_xe | Cisco | 3.13.2s (including) | 3.13.2s (including) |
| Ios_xe | Cisco | 3.13.3s (including) | 3.13.3s (including) |
| Ios_xe | Cisco | 3.13.4s (including) | 3.13.4s (including) |
| Ios_xe | Cisco | 3.14.0s (including) | 3.14.0s (including) |
| Ios_xe | Cisco | 3.14.1s (including) | 3.14.1s (including) |
| Ios_xe | Cisco | 3.14.2s (including) | 3.14.2s (including) |
| Ios_xe | Cisco | 3.14.3s (including) | 3.14.3s (including) |
| Ios_xe | Cisco | 3.15.0s (including) | 3.15.0s (including) |
| Ios_xe | Cisco | 3.15.1cs (including) | 3.15.1cs (including) |
| Ios_xe | Cisco | 3.15.1s (including) | 3.15.1s (including) |
| Ios_xe | Cisco | 3.15.2s (including) | 3.15.2s (including) |
| Ios_xe | Cisco | 3.15.3s (including) | 3.15.3s (including) |
| Ios_xe | Cisco | 3.16.0cs (including) | 3.16.0cs (including) |
| Ios_xe | Cisco | 3.16.0s (including) | 3.16.0s (including) |
| Ios_xe | Cisco | 3.16.1as (including) | 3.16.1as (including) |
| Ios_xe | Cisco | 3.16.1s (including) | 3.16.1s (including) |
| Ios_xe | Cisco | 3.17.0s (including) | 3.17.0s (including) |
| Ios_xe | Cisco | 16.1.3 (including) | 16.1.3 (including) |
| Ios_xe | Cisco | 16.1.4 (including) | 16.1.4 (including) |
| Ios_xe | Cisco | 16.2.1 (including) | 16.2.1 (including) |
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-esp-nat
- http://www.securityfocus.com/bid/93200
- http://www.securitytracker.com/id/1036914
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-esp-nat
- http://www.securityfocus.com/bid/93200
- http://www.securitytracker.com/id/1036914