CVE-2017-6729

Summary

CVE	CVE-2017-6729
State	PUBLISHED
Assigner	cisco
Source Priority	CVE Program / NVD first with legacy fallback
Published	2017-07-10 20:29:00 UTC
Updated	2025-04-20 01:37:25 UTC
Description	A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. More Information: CSCvc44968. Known Affected Releases: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Known Fixed Releases: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.0.

Risk And Classification

Primary CVSS: v3.0 7.5 HIGH from [email protected]

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Problem Types: NVD-CWE-noinfo | Denial of Service Vulnerability

Version	Source	Type	Score	Severity	Vector
3.0	[email protected]	Primary	7.5	HIGH	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
2.0	[email protected]	Primary	5		`AV:N/AC:L/Au:N/C:N/I:N/A:P`

CVSS v3.0 Breakdown

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

AV:N/AC:L/Au:N/C:N/I:N/A:P

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Cisco	Asr 5000	-	All	All	All
Application	Cisco	Asr 5000 Software	16.4.1	All	All	All
Application	Cisco	Asr 5000 Software	16.5.0	All	All	All
Application	Cisco	Asr 5000 Software	16.5.2	All	All	All
Application	Cisco	Asr 5000 Software	17.2.0	All	All	All
Application	Cisco	Asr 5000 Software	17.2.0.59184	All	All	All
Application	Cisco	Asr 5000 Software	17.3.0	All	All	All
Application	Cisco	Asr 5000 Software	17.3.1	All	All	All
Application	Cisco	Asr 5000 Software	17.3.9.62033	All	All	All
Application	Cisco	Asr 5000 Software	17.3_base	All	All	All
Application	Cisco	Asr 5000 Software	17.7.0	All	All	All
Application	Cisco	Asr 5000 Software	17.7.5	All	All	All
Application	Cisco	Asr 5000 Software	18.0.0	All	All	All
Application	Cisco	Asr 5000 Software	18.0.0.57828	All	All	All
Application	Cisco	Asr 5000 Software	18.0.0.59167	All	All	All
Application	Cisco	Asr 5000 Software	18.0.0.59211	All	All	All
Application	Cisco	Asr 5000 Software	18.0.l0.59219	All	All	All
Application	Cisco	Asr 5000 Software	18.1.0	All	All	All
Application	Cisco	Asr 5000 Software	18.1.0.59776	All	All	All
Application	Cisco	Asr 5000 Software	18.1.0.59780	All	All	All
Application	Cisco	Asr 5000 Software	18.1_base	All	All	All
Application	Cisco	Asr 5000 Software	18.3.0	All	All	All
Application	Cisco	Asr 5000 Software	18.3_base	All	All	All
Application	Cisco	Asr 5000 Software	18.4.0	All	All	All
Application	Cisco	Asr 5000 Software	19.0.1	All	All	All
Application	Cisco	Asr 5000 Software	19.0.m0.60737	All	All	All
Application	Cisco	Asr 5000 Software	19.0.m0.60828	All	All	All
Application	Cisco	Asr 5000 Software	19.0.m0.61045	All	All	All
Application	Cisco	Asr 5000 Software	19.1.0	All	All	All
Application	Cisco	Asr 5000 Software	19.1.0.61559	All	All	All
Application	Cisco	Asr 5000 Software	19.2.0	All	All	All
Application	Cisco	Asr 5000 Software	19.3.0	All	All	All
Application	Cisco	Asr 5000 Software	19.6.3	All	All	All
Application	Cisco	Asr 5000 Software	19.6_base	All	All	All
Application	Cisco	Asr 5000 Software	20.0.0	All	All	All
Application	Cisco	Asr 5000 Software	20.0.1.0	All	All	All
Application	Cisco	Asr 5000 Software	20.0.1.a0	All	All	All
Application	Cisco	Asr 5000 Software	20.0.1.v0	All	All	All
Application	Cisco	Asr 5000 Software	20.0.2.3	All	All	All
Application	Cisco	Asr 5000 Software	20.0.2.3.65026	All	All	All
Application	Cisco	Asr 5000 Software	20.0.2.v1	All	All	All
Application	Cisco	Asr 5000 Software	20.0.m0.62842	All	All	All
Application	Cisco	Asr 5000 Software	20.0.m0.63229	All	All	All
Application	Cisco	Asr 5000 Software	20.0.v0	All	All	All
Application	Cisco	Asr 5000 Software	20.1.v2	All	All	All
Application	Cisco	Asr 5000 Software	20.1_base	All	All	All
Application	Cisco	Asr 5000 Software	20.2.12	All	All	All
Application	Cisco	Asr 5000 Software	20.2_base	All	All	All
Application	Cisco	Asr 5000 Software	21.0.0	All	All	All
Application	Cisco	Asr 5000 Software	21.0.v1	All	All	All
Application	Cisco	Asr 5000 Software	21.0_base	All	All	All
Application	Cisco	Asr 5000 Software	21.0_m0.64246	All	All	All
Application	Cisco	Asr 5000 Software	21.0_m0.64702	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	Cisco StarOS	affected Cisco StarOS	Not specified

References

Reference	Source	Link	Tags
Cisco StarOS Border Gateway Protocol Process Denial of Service Vulnerability	af854a3a-2127-422b-91ae-364da2661108	tools.cisco.com	Vendor Advisory
Cisco ASR 5000 Series Routers StarOS BGP Processing Flaw Lets Remote Users Cause the Target Service to Reload - SecurityTracker	af854a3a-2127-422b-91ae-364da2661108	www.securitytracker.com	Third Party Advisory, VDB Entry
Cisco StarOS CVE-2017-6729 Remote Denial of Service Vulnerability	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.