CVE-2018-0395
Summary
| CVE | CVE-2018-0395 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-10-17 19:29:00 UTC |
| Updated | 2023-04-20 17:17:00 UTC |
| Description | A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when the device unexpectedly reloads. The vulnerability is due to improper input validation of certain type, length, value (TLV) fields of the LLDP frame header. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface on the targeted device. A successful exploit could allow the attacker to cause the switch to reload unexpectedly. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | Firepower 9300 | - | All | All | All |
| Hardware | Cisco | Firepower 9300 | - | All | All | All |
| Operating System | Cisco | Firepower Extensible Operating System | r231 | All | All | All |
| Operating System | Cisco | Fxos | 12.3(1e) | All | All | All |
| Operating System | Cisco | Fxos | 12.3\(1e\) | All | All | All |
| Operating System | Cisco | Fxos | 3.2(3d)c | All | All | All |
| Operating System | Cisco | Fxos | 3.2\(3d\)c | All | All | All |
| Operating System | Cisco | Fxos | 6.0(4) | All | All | All |
| Operating System | Cisco | Fxos | 6.0\(4\) | All | All | All |
| Operating System | Cisco | Fxos | 6.1(3)s2 | All | All | All |
| Operating System | Cisco | Fxos | 6.1\(3\)s2 | All | All | All |
| Operating System | Cisco | Fxos | r231 | All | All | All |
| Operating System | Cisco | Fxos | 12.3\(1e\) | All | All | All |
| Operating System | Cisco | Fxos | 3.2\(3d\)c | All | All | All |
| Operating System | Cisco | Fxos | 6.0\(4\) | All | All | All |
| Operating System | Cisco | Fxos | 6.1\(3\)s2 | All | All | All |
| Operating System | Cisco | Fxos | r231 | All | All | All |
| Hardware | Cisco | Nexus 7000 10-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7000 10-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7000 18-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7000 18-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7000 4-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7000 4-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7000 9-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7000 9-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7700 10-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7700 10-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7700 18-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7700 18-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7700 2-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7700 2-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7700 6-slot | - | All | All | All |
| Hardware | Cisco | Nexus 7700 6-slot | - | All | All | All |
| Operating System | Cisco | Nx-os | 12.3(1e) | All | All | All |
| Operating System | Cisco | Nx-os | 12.3\(1e\) | All | All | All |
| Operating System | Cisco | Nx-os | 3.2(3d)c | All | All | All |
| Operating System | Cisco | Nx-os | 3.2\(3d\)c | All | All | All |
| Operating System | Cisco | Nx-os | 6.0(4) | All | All | All |
| Operating System | Cisco | Nx-os | 6.0\(4\) | All | All | All |
| Operating System | Cisco | Nx-os | 6.1(3)s2 | All | All | All |
| Operating System | Cisco | Nx-os | 6.1\(3\)s2 | All | All | All |
| Operating System | Cisco | Nx-os | r231 | All | All | All |
| Operating System | Cisco | Nx-os | 12.3\(1e\) | All | All | All |
| Operating System | Cisco | Nx-os | 3.2\(3d\)c | All | All | All |
| Operating System | Cisco | Nx-os | 6.0\(4\) | All | All | All |
| Operating System | Cisco | Nx-os | 6.1\(3\)s2 | All | All | All |
| Operating System | Cisco | Nx-os | r231 | All | All | All |
| Hardware | Cisco | Ucs | - | All | All | All |
| Hardware | Cisco | Ucs | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Malformed Request | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Cisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| Cisco NX-OS LLDP TLV Processing Bugs Let Remote Users Cause the Target Service to Crash - SecurityTracker | SECTRACK | www.securitytracker.com | Third Party Advisory, VDB Entry |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.