Vulnerability-Lookup

CNVD-2018-09782

Vulnerability from cnvd - Published: 2018-05-18

Title

Cisco ASR 5700系列路由器输入验证漏洞

Description

Cisco Aggregation Services Router（ASR）5000 Series Routers和Virtualized Packet Core（VPC）System Software都是美国思科（Cisco）公司的产品。Cisco Aggregation Services Router（ASR）5000 Series Routers是一款5000系列的安全路由器设备。Virtualized Packet Core（VPC）System Software是一套被部署在专用硬件平台的StarOS软件的产品化版本。StarOS是使用在其中的一套操作系统。 Cisco ASR 5700 Series和VPC System Software中的StarOS存在输入验证漏洞，该漏洞源于程序未能正确的校验传输数据包的长度是否超过了网卡所支持的最大长度。远程攻击者可通过发送特制的数据包或大量特制的IP片段利用该漏洞造成界面无法发送数据包。

Severity

高

Patch Name

Cisco ASR 5700系列路由器输入验证漏洞的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros

Reference

https://www.securityfocus.com/bid/103923

Impacted products

Name
['Cisco Aggregation Services Router (ASR) 5700 Series', 'Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) System Software', 'Cisco Virtualized Packet Core-Single Instance (VPC-SI) System Software']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0239"
    }
  },
  "description": "Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u548cVirtualized Packet Core\uff08VPC\uff09System Software\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u662f\u4e00\u6b3e5000\u7cfb\u5217\u7684\u5b89\u5168\u8def\u7531\u5668\u8bbe\u5907\u3002Virtualized Packet Core\uff08VPC\uff09System Software\u662f\u4e00\u5957\u88ab\u90e8\u7f72\u5728\u4e13\u7528\u786c\u4ef6\u5e73\u53f0\u7684StarOS\u8f6f\u4ef6\u7684\u4ea7\u54c1\u5316\u7248\u672c\u3002StarOS\u662f\u4f7f\u7528\u5728\u5176\u4e2d\u7684\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nCisco ASR 5700 Series\u548cVPC System Software\u4e2d\u7684StarOS\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u6821\u9a8c\u4f20\u8f93\u6570\u636e\u5305\u7684\u957f\u5ea6\u662f\u5426\u8d85\u8fc7\u4e86\u7f51\u5361\u6240\u652f\u6301\u7684\u6700\u5927\u957f\u5ea6\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684\u6570\u636e\u5305\u6216\u5927\u91cf\u7279\u5236\u7684IP\u7247\u6bb5\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u754c\u9762\u65e0\u6cd5\u53d1\u9001\u6570\u636e\u5305\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-09782",
  "openTime": "2018-05-18",
  "patchDescription": "Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u548cVirtualized Packet Core\uff08VPC\uff09System Software\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Aggregation Services Router\uff08ASR\uff095000 Series Routers\u662f\u4e00\u6b3e5000\u7cfb\u5217\u7684\u5b89\u5168\u8def\u7531\u5668\u8bbe\u5907\u3002Virtualized Packet Core\uff08VPC\uff09System Software\u662f\u4e00\u5957\u88ab\u90e8\u7f72\u5728\u4e13\u7528\u786c\u4ef6\u5e73\u53f0\u7684StarOS\u8f6f\u4ef6\u7684\u4ea7\u54c1\u5316\u7248\u672c\u3002StarOS\u662f\u4f7f\u7528\u5728\u5176\u4e2d\u7684\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nCisco ASR 5700 Series\u548cVPC System Software\u4e2d\u7684StarOS\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u7684\u6821\u9a8c\u4f20\u8f93\u6570\u636e\u5305\u7684\u957f\u5ea6\u662f\u5426\u8d85\u8fc7\u4e86\u7f51\u5361\u6240\u652f\u6301\u7684\u6700\u5927\u957f\u5ea6\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684\u6570\u636e\u5305\u6216\u5927\u91cf\u7279\u5236\u7684IP\u7247\u6bb5\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u754c\u9762\u65e0\u6cd5\u53d1\u9001\u6570\u636e\u5305\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco ASR 5700\u7cfb\u5217\u8def\u7531\u5668\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Aggregation Services Router (ASR) 5700 Series",
      "Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) System Software",
      "Cisco Virtualized Packet Core-Single Instance (VPC-SI) System Software"
    ]
  },
  "referenceLink": "https://www.securityfocus.com/bid/103923",
  "serverity": "\u9ad8",
  "submitTime": "2018-04-23",
  "title": "Cisco ASR 5700\u7cfb\u5217\u8def\u7531\u5668\u8f93\u5165\u9a8c\u8bc1\u6f0f\u6d1e"
}

CVE-2018-0239 (GCVE-0-2018-0239)

Vulnerability from cvelistv5 – Published: 2018-04-19 20:00 – Updated: 2024-11-29 15:17

Summary

A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (ASR) 5700 Series devices and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to cause an interface on the device to cease forwarding packets. The device may need to be manually reloaded to clear this Interface Forwarding Denial of Service condition. The vulnerability is due to the failure to properly check that the length of a packet to transmit does not exceed the maximum supported length of the network interface card (NIC). An attacker could exploit this vulnerability by sending a crafted IP packet or a series of crafted IP fragments through an interface on the targeted device. A successful exploit could allow the attacker to cause the network interface to cease forwarding packets. This vulnerability could be triggered by either IPv4 or IPv6 network traffic. This vulnerability affects the following Cisco products when they are running the StarOS operating system and a virtual interface card is installed on the device: Aggregation Services Router (ASR) 5700 Series, Virtualized Packet Core-Distributed Instance (VPC-DI) System Software, Virtualized Packet Core-Single Instance (VPC-SI) System Software. Cisco Bug IDs: CSCvf32385.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-29 14:44 UTC

CWE

CWE-20

Assigner

cisco mitre root Scorecard

References

3 references

URL	Tags
https://tools.cisco.com/security/center/content/C…	x_refsource_CONFIRM
http://www.securityfocus.com/bid/103923	vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1040720	vdb-entryx_refsource_SECTRACK

Impacted products

1 product

Vendor	Product	Version
n/a	Cisco StarOS	Affected: Cisco StarOS

Date Public

2018-04-19 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:21:13.907Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros"
          },
          {
            "name": "103923",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/103923"
          },
          {
            "name": "1040720",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040720"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-0239",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-29T14:44:26.771177Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-29T15:17:20.215Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco StarOS",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Cisco StarOS"
            }
          ]
        }
      ],
      "datePublic": "2018-04-19T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (ASR) 5700 Series devices and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to cause an interface on the device to cease forwarding packets. The device may need to be manually reloaded to clear this Interface Forwarding Denial of Service condition. The vulnerability is due to the failure to properly check that the length of a packet to transmit does not exceed the maximum supported length of the network interface card (NIC). An attacker could exploit this vulnerability by sending a crafted IP packet or a series of crafted IP fragments through an interface on the targeted device. A successful exploit could allow the attacker to cause the network interface to cease forwarding packets. This vulnerability could be triggered by either IPv4 or IPv6 network traffic. This vulnerability affects the following Cisco products when they are running the StarOS operating system and a virtual interface card is installed on the device: Aggregation Services Router (ASR) 5700 Series, Virtualized Packet Core-Distributed Instance (VPC-DI) System Software, Virtualized Packet Core-Single Instance (VPC-SI) System Software. Cisco Bug IDs: CSCvf32385."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-04-20T09:57:01.000Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros"
        },
        {
          "name": "103923",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/103923"
        },
        {
          "name": "1040720",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040720"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2018-0239",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco StarOS",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Cisco StarOS"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (ASR) 5700 Series devices and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to cause an interface on the device to cease forwarding packets. The device may need to be manually reloaded to clear this Interface Forwarding Denial of Service condition. The vulnerability is due to the failure to properly check that the length of a packet to transmit does not exceed the maximum supported length of the network interface card (NIC). An attacker could exploit this vulnerability by sending a crafted IP packet or a series of crafted IP fragments through an interface on the targeted device. A successful exploit could allow the attacker to cause the network interface to cease forwarding packets. This vulnerability could be triggered by either IPv4 or IPv6 network traffic. This vulnerability affects the following Cisco products when they are running the StarOS operating system and a virtual interface card is installed on the device: Aggregation Services Router (ASR) 5700 Series, Virtualized Packet Core-Distributed Instance (VPC-DI) System Software, Virtualized Packet Core-Single Instance (VPC-SI) System Software. Cisco Bug IDs: CSCvf32385."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-20"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros",
              "refsource": "CONFIRM",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-staros"
            },
            {
              "name": "103923",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/103923"
            },
            {
              "name": "1040720",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040720"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-0239",
    "datePublished": "2018-04-19T20:00:00.000Z",
    "dateReserved": "2017-11-27T00:00:00.000Z",
    "dateUpdated": "2024-11-29T15:17:20.215Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2018-09782

CVE-2018-0239 (GCVE-0-2018-0239)

Tags

Sightings

Nomenclature

Related by attack behaviour