CVEvulnerability

CVE-2018-15373

7.4 HIGH Published 2018-10-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.4 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 2.0 ([email protected])
6.1 MEDIUM — AV:A/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
CWE-399, CWE-770

Description

A vulnerability in the implementation of Cisco Discovery Protocol functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper memory handling by the affected software when the software processes high rates of Cisco Discovery Protocol packets that are sent to a device. An attacker could exploit this vulnerability by sending a high rate of Cisco Discovery Protocol packets to an affected device. A successful exploit could allow the attacker to exhaust memory on the affected device, resulting in a DoS condition.

Affected configurations

• cisco ios 15.5\(3\)s3.16 • cisco ios xe 15.5\(3\)s3.16

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References