CVE-2018-0189
Description
A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of service (DoS) condition. The vulnerability is due to a limitation in the way the FIB is internally representing recursive routes. An attacker could exploit this vulnerability by injecting routes into the routing protocol that have a specific recursive pattern. The attacker must be in a position on the network that provides the ability to inject a number of recursive routes with a specific pattern. An exploit could allow the attacker to cause an affected device to reload, creating a DoS condition. Cisco Bug IDs: CSCva91655.
Risk Information
Base Score
5.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.336
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco ASR 1000 Series Aggregation Services Routers | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco Cloud Services Router 1000V Series | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco Catalyst 3850 Series Switches | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco Catalyst 3650 Series Switches | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco 4000 Series Integrated Services Routers | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco 1000 Series Integrated Services Routers | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco Catalyst 9300 Series Switches | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco Catalyst 9500 Series Switches | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco Catalyst 9400 Series Switches | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco 1100 Series Industrial Integrated Services Routers | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco Catalyst 9200 Series Switches | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco Catalyst 9600 Series Switches | NCM |
| Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability For Cisco Catalyst 9800 Series Wireless Controllers | NCM |
| CVE-2018-0189 | NCM |
Patch Details
Click to see the patches provided by ManageEngine for this CVE
| Patch ID | Patch Description |
|---|---|
| PATCH-1705898 | Security Update for Cisco ASR 1000 Series Aggregation Services Routers Denali-16.3.4a |
| PATCH-1705899 | Security Update for Cisco Cloud Services Router 1000V Series Denali-16.3.4a |
| PATCH-1705900 | Security Update for Cisco Catalyst 3850 Series Switches Denali-16.3.4a |
| PATCH-1705832 | Security Update for Cisco Catalyst 3650 Series Switches Everest-16.5.1 |
| PATCH-1705901 | Security Update for Cisco 4000 Series Integrated Services Routers Denali-16.3.4a |
| PATCH-1705902 | Security Update for Cisco 1000 Series Integrated Services Routers Denali-16.3.4a |
| PATCH-1705903 | Security Update for Cisco Catalyst 9300 Series Switches Denali-16.3.4a |
| PATCH-1705904 | Security Update for Cisco Catalyst 9500 Series Switches Denali-16.3.4a |
| PATCH-1705905 | Security Update for Cisco Catalyst 9400 Series Switches Denali-16.3.4a |
| PATCH-1705906 | Security Update for Cisco 1100 Series Industrial Integrated Services Routers Denali-16.3.4a |
| PATCH-1705907 | Security Update for Cisco Catalyst 9200 Series Switches Denali-16.3.4a |
| PATCH-1705908 | Security Update for Cisco Catalyst 9600 Series Switches Denali-16.3.4a |
| PATCH-1705909 | Security Update for Cisco Catalyst 9800 Series Wireless Controllers Denali-16.3.4a |
References
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234