var-201806-1000
Vulnerability from variot
A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect memory operations that the affected software performs when the software parses a username during login authentication. An attacker could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device or cause the affected device to reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are running Cisco IOS XE Software Release Fuji 16.7.1 or Fuji 16.8.1 and are configured to use AAA for login authentication. Cisco Bug IDs: CSCvi25380. Vendors have confirmed this vulnerability Bug ID CSCvi25380 It is released as.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Cisco IOSXESoftware is a set of operating systems developed by Cisco for its network devices. A buffer overflow vulnerability exists in the Authentication, Authorization, and Recording (AAA) security service in Cisco IOSXESoftwareFuji16.7.1 and Fuji16.8.1. This vulnerability stems from a program failing to perform memory operations correctly
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201806-1000", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "ios xe", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "16.8.1" }, { "model": "ios xe", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "16.7.1" }, { "model": "ios xe", "scope": "eq", "trust": 0.8, "vendor": "cisco", "version": "fuji 16.7.1" }, { "model": "ios xe", "scope": "eq", "trust": 0.8, "vendor": "cisco", "version": "fuji 16.8.1" }, { "model": "ios xe software fuji-16.8.1", "scope": null, "trust": 0.6, "vendor": "cisco", "version": null }, { "model": "ios xe software fuji-16.7.1", "scope": null, "trust": 0.6, "vendor": "cisco", "version": null }, { "model": "ios xe", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "fuji-16.8.1" }, { "model": "ios xe", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "fuji-16.8.1a" }, { "model": "ios xe", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "fuji-16.7.1" }, { "model": "ios xe software fuji", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "16.8.1" }, { "model": "ios xe software fuji", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "16.7.1" }, { "model": "ios xe software fuji", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": "16.7.2" }, { "model": "ios xe software fuji 16.8.1s", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": null }, { "model": "ios xe software fuji 16.8.1c", "scope": "ne", "trust": 0.3, "vendor": "cisco", "version": null } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-11323" }, { "db": "BID", "id": "104410" }, { "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "db": "NVD", "id": "CVE-2018-0315" }, { "db": "CNNVD", "id": "CNNVD-201806-400" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2018-0315" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "The vendor reported this issue.", "sources": [ { "db": "BID", "id": "104410" } ], "trust": 0.3 }, "cve": "CVE-2018-0315", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 8.6, "impactScore": 10.0, "integrityImpact": "COMPLETE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Partial", "baseScore": 7.5, "confidentialityImpact": "Partial", "exploitabilityScore": null, "id": "CVE-2018-0315", "impactScore": null, "integrityImpact": "Partial", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 10.0, "id": "CNVD-2018-11323", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "HIGH", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 8.6, "id": "VHN-118517", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "HIGH", "trust": 0.1, "vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULMON", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 8.6, "id": "CVE-2018-0315", "impactScore": 10.0, "integrityImpact": "COMPLETE", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "HIGH", "trust": 0.1, "userInteractionRequired": null, "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "NVD", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "exploitabilityScore": 3.9, "impactScore": 5.9, "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, { "attackComplexity": "Low", "attackVector": "Network", "author": "NVD", "availabilityImpact": "High", "baseScore": 9.8, "baseSeverity": "Critical", "confidentialityImpact": "High", "exploitabilityScore": null, "id": "CVE-2018-0315", "impactScore": null, "integrityImpact": "High", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } ], "severity": [ { "author": "NVD", "id": "CVE-2018-0315", "trust": 1.8, "value": "CRITICAL" }, { "author": "CNVD", "id": "CNVD-2018-11323", "trust": 0.6, "value": "HIGH" }, { "author": "CNNVD", "id": "CNNVD-201806-400", "trust": 0.6, "value": "CRITICAL" }, { "author": "VULHUB", "id": "VHN-118517", "trust": 0.1, "value": "HIGH" }, { "author": "VULMON", "id": "CVE-2018-0315", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-11323" }, { "db": "VULHUB", "id": "VHN-118517" }, { "db": "VULMON", "id": "CVE-2018-0315" }, { "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "db": "NVD", "id": "CVE-2018-0315" }, { "db": "CNNVD", "id": "CNNVD-201806-400" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect memory operations that the affected software performs when the software parses a username during login authentication. An attacker could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to execute arbitrary code on the affected device or cause the affected device to reload, resulting in a DoS condition. This vulnerability affects Cisco devices that are running Cisco IOS XE Software Release Fuji 16.7.1 or Fuji 16.8.1 and are configured to use AAA for login authentication. Cisco Bug IDs: CSCvi25380. Vendors have confirmed this vulnerability Bug ID CSCvi25380 It is released as.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Cisco IOSXESoftware is a set of operating systems developed by Cisco for its network devices. A buffer overflow vulnerability exists in the Authentication, Authorization, and Recording (AAA) security service in Cisco IOSXESoftwareFuji16.7.1 and Fuji16.8.1. This vulnerability stems from a program failing to perform memory operations correctly", "sources": [ { "db": "NVD", "id": "CVE-2018-0315" }, { "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "db": "CNVD", "id": "CNVD-2018-11323" }, { "db": "BID", "id": "104410" }, { "db": "VULHUB", "id": "VHN-118517" }, { "db": "VULMON", "id": "CVE-2018-0315" } ], "trust": 2.61 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2018-0315", "trust": 3.5 }, { "db": "BID", "id": "104410", "trust": 2.7 }, { "db": "SECTRACK", "id": "1041086", "trust": 1.8 }, { "db": "JVNDB", "id": "JVNDB-2018-006127", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201806-400", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2018-11323", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-118517", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2018-0315", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-11323" }, { "db": "VULHUB", "id": "VHN-118517" }, { "db": "VULMON", "id": "CVE-2018-0315" }, { "db": "BID", "id": "104410" }, { "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "db": "NVD", "id": "CVE-2018-0315" }, { "db": "CNNVD", "id": "CNNVD-201806-400" } ] }, "id": "VAR-201806-1000", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2018-11323" }, { "db": "VULHUB", "id": "VHN-118517" } ], "trust": 1.2946521149999999 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-11323" } ] }, "last_update_date": "2023-12-18T13:19:06.507000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "cisco-sa-20180606-aaa", "trust": 0.8, "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20180606-aaa" }, { "title": "Patch for Cisco IOSXESoftware Buffer Overflow Vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/131747" }, { "title": "Cisco IOS XE Software Buffer error vulnerability fix", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=80747" }, { "title": "Cisco: Cisco IOS XE Software Authentication, Authorization, and Accounting Login Authentication Remote Code Execution Vulnerability", "trust": 0.1, "url": "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts\u0026qid=cisco-sa-20180606-aaa" }, { "title": "", "trust": 0.1, "url": "https://github.com/live-hack-cve/cve-2018-0315 " } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-11323" }, { "db": "VULMON", "id": "CVE-2018-0315" }, { "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "db": "CNNVD", "id": "CNNVD-201806-400" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-119", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-118517" }, { "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "db": "NVD", "id": "CVE-2018-0315" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.8, "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20180606-aaa" }, { "trust": 1.8, "url": "http://www.securityfocus.com/bid/104410" }, { "trust": 1.8, "url": "http://www.securitytracker.com/id/1041086" }, { "trust": 0.8, "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-0315" }, { "trust": 0.8, "url": "https://nvd.nist.gov/vuln/detail/cve-2018-0315" }, { "trust": 0.3, "url": "http://www.cisco.com/" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/119.html" }, { "trust": 0.1, "url": "https://github.com/live-hack-cve/cve-2018-0315" }, { "trust": 0.1, "url": "https://nvd.nist.gov" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2018-11323" }, { "db": "VULHUB", "id": "VHN-118517" }, { "db": "VULMON", "id": "CVE-2018-0315" }, { "db": "BID", "id": "104410" }, { "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "db": "NVD", "id": "CVE-2018-0315" }, { "db": "CNNVD", "id": "CNNVD-201806-400" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2018-11323" }, { "db": "VULHUB", "id": "VHN-118517" }, { "db": "VULMON", "id": "CVE-2018-0315" }, { "db": "BID", "id": "104410" }, { "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "db": "NVD", "id": "CVE-2018-0315" }, { "db": "CNNVD", "id": "CNNVD-201806-400" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-06-12T00:00:00", "db": "CNVD", "id": "CNVD-2018-11323" }, { "date": "2018-06-07T00:00:00", "db": "VULHUB", "id": "VHN-118517" }, { "date": "2018-06-07T00:00:00", "db": "VULMON", "id": "CVE-2018-0315" }, { "date": "2018-06-06T00:00:00", "db": "BID", "id": "104410" }, { "date": "2018-08-07T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "date": "2018-06-07T12:29:00.433000", "db": "NVD", "id": "CVE-2018-0315" }, { "date": "2018-06-08T00:00:00", "db": "CNNVD", "id": "CNNVD-201806-400" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2018-06-12T00:00:00", "db": "CNVD", "id": "CNVD-2018-11323" }, { "date": "2023-01-24T00:00:00", "db": "VULHUB", "id": "VHN-118517" }, { "date": "2023-01-24T00:00:00", "db": "VULMON", "id": "CVE-2018-0315" }, { "date": "2018-06-06T00:00:00", "db": "BID", "id": "104410" }, { "date": "2018-08-07T00:00:00", "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "date": "2023-01-24T16:10:05.727000", "db": "NVD", "id": "CVE-2018-0315" }, { "date": "2022-06-06T00:00:00", "db": "CNNVD", "id": "CNNVD-201806-400" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201806-400" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco IOS XE Software buffer error vulnerability", "sources": [ { "db": "JVNDB", "id": "JVNDB-2018-006127" }, { "db": "CNNVD", "id": "CNNVD-201806-400" } ], "trust": 1.4 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "buffer error", "sources": [ { "db": "CNNVD", "id": "CNNVD-201806-400" } ], "trust": 0.6 } }
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.