medium5.9
CVE-2016-1344
The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fr…
Impact
The IKEv2 implementation in Cisco IOS 15.0 through 15.6 and IOS XE 3.3 through 3.17 allows remote attackers to cause a denial of service (device reload) via fragmented packets, aka Bug ID CSCux38417.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios Xe | Versions 3.3s_3.3.0s, 3.3s_3.3.1s, 3.3s_3.3.2s, 3.3sg_3.3.0sg, 3.3sg_3.3.1sg, 3.3sg_3.3.2sg |
| Lenovo | Thinkcentre E75s Firmware | before m16kt61a |
| Netgear | Jr6150 Firmware | before 2017-01-06 |
| Samsung | X14j Firmware | Version t-ms14jakucb-1102.5 |
| Sun | Opensolaris | Version snv_124 |
| Zyxel | Gs1900-10hp Firmware | before 2.50\(aazi.0\)c0 |
| Zzinc | Keymouse Firmware | Version 3.08 |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ios-ikev2
- http://www.securityfocus.com/bid/85311
- http://www.securitytracker.com/id/1035382
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-ios-ikev2
- http://www.securityfocus.com/bid/85311
- http://www.securitytracker.com/id/1035382