NetSight
high7.5

CVE-2016-6386

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) v…

Impact

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005.

Affected products

VendorProductAffected versions
CiscoIos Xe
Versions 3.1.0s, 3.1.0sg, 3.1.1s, 3.1.1sg, 3.1.2s, 3.1.3as
CiscoIos Xe 16.1
Version 16.1.2
CiscoIos Xe 3.2ja
Version 3.2.0ja
CiscoIos Xe 3.3sg
Versions 3.3.0sg, 3.3.1sg, 3.3.2sg
CiscoIos Xe 3.3xo
Versions 3.3.0xo, 3.3.1xo, 3.3.2xo
CiscoIos Xe 3.4sg
Versions 3.4.0sg, 3.4.1sg, 3.4.2sg, 3.4.3sg, 3.4.4sg, 3.4.5sg

Weakness classification

References