Cisco IOS Dual-stack Router IPv6 Denial Of Service Vulnerability

Bugtraq ID:	28461
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-1153
Remote:	Yes
Local:	No
Published:	Mar 26 2008 12:00AM
Updated:	Apr 02 2008 05:19PM
Credit:	The vulnerability was announced by Cisco.
Vulnerable:	Cisco IOS 12.4XT Cisco IOS 12.4XJ Cisco IOS 12.4XG Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4SW Cisco IOS 12.4MR Cisco IOS 12.4(8d) Cisco IOS 12.4(5c) Cisco IOS 12.4(3h) Cisco IOS 12.4(10c) Cisco IOS 12.4 Cisco IOS 12.3YZ Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YM Cisco IOS 12.3YJ Cisco IOS 12.3YI Cisco IOS 12.3YH Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3YD Cisco IOS 12.3YA Cisco IOS 12.3XW Cisco IOS 12.3XU Cisco IOS 12.3XS Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XH Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XB Cisco IOS 12.3XA Cisco IOS 12.3VA Cisco IOS 12.3TPC Cisco IOS 12.3T Cisco IOS 12.3JX Cisco IOS 12.3JL Cisco IOS 12.3JK Cisco IOS 12.3JEB Cisco IOS 12.3JEA Cisco IOS 12.3BW Cisco IOS 12.3BC Cisco IOS 12.3B Cisco IOS 12.3(23) Cisco IOS 12.3(19a) Cisco IOS 12.3(18a) Cisco IOS 12.3(17c) Cisco IOS 12.3 Cisco IOS 12.2ZU Cisco IOS 12.2ZP Cisco IOS 12.2ZL Cisco IOS 12.2ZJ Cisco IOS 12.2ZH Cisco IOS 12.2ZG Cisco IOS 12.2ZF Cisco IOS 12.2ZE Cisco IOS 12.2ZD Cisco IOS 12.2ZC Cisco IOS 12.2ZB Cisco IOS 12.2ZA Cisco IOS 12.2YZ Cisco IOS 12.2YY Cisco IOS 12.2YX Cisco IOS 12.2YW Cisco IOS 12.2YV Cisco IOS 12.2YU Cisco IOS 12.2YT Cisco IOS 12.2YR Cisco IOS 12.2YQ Cisco IOS 12.2YP Cisco IOS 12.2YO Cisco IOS 12.2YN Cisco IOS 12.2YM Cisco IOS 12.2YL Cisco IOS 12.2YK Cisco IOS 12.2YJ Cisco IOS 12.2YH Cisco IOS 12.2YG Cisco IOS 12.2YF Cisco IOS 12.2YE Cisco IOS 12.2YD Cisco IOS 12.2YC Cisco IOS 12.2YB Cisco IOS 12.2YA Cisco IOS 12.2XW Cisco IOS 12.2XV Cisco IOS 12.2XU Cisco IOS 12.2XT Cisco IOS 12.2XR Cisco IOS 12.2XQ Cisco IOS 12.2XN Cisco IOS 12.2XM Cisco IOS 12.2XL Cisco IOS 12.2XK Cisco IOS 12.2XJ Cisco IOS 12.2XI Cisco IOS 12.2XH Cisco IOS 12.2XG Cisco IOS 12.2XF Cisco IOS 12.2XE Cisco IOS 12.2XD Cisco IOS 12.2XC Cisco IOS 12.2XB Cisco IOS 12.2XA Cisco IOS 12.2TPC Cisco IOS 12.2T Cisco IOS 12.2SZ Cisco IOS 12.2SY Cisco IOS 12.2SXF Cisco IOS 12.2SXE Cisco IOS 12.2SXD Cisco IOS 12.2SXB Cisco IOS 12.2SXA Cisco IOS 12.2SX Cisco IOS 12.2SW Cisco IOS 12.2SV Cisco IOS 12.2SU Cisco IOS 12.2SRB Cisco IOS 12.2SRA Cisco IOS 12.2SO Cisco IOS 12.2SM Cisco IOS 12.2SGA Cisco IOS 12.2SEG Cisco IOS 12.2SEF Cisco IOS 12.2SEE Cisco IOS 12.2SED Cisco IOS 12.2SEC Cisco IOS 12.2SEB Cisco IOS 12.2SEA Cisco IOS 12.2SBC Cisco IOS 12.2SB Cisco IOS 12.2MC Cisco IOS 12.2MB Cisco IOS 12.2JK Cisco IOS 12.2JA Cisco IOS 12.2IXD Cisco IOS 12.2IXC Cisco IOS 12.2IXB Cisco IOS 12.2IXA Cisco IOS 12.2FZ Cisco IOS 12.2FY Cisco IOS 12.2FX Cisco IOS 12.2EZ Cisco IOS 12.2EW Cisco IOS 12.2EU Cisco IOS 12.2DX Cisco IOS 12.2DD Cisco IOS 12.2CZ Cisco IOS 12.2CX Cisco IOS 12.2BZ Cisco IOS 12.2BY Cisco IOS 12.2BW Cisco IOS 12.2BC Cisco IOS 12.2B Cisco IOS 12.2(37)SE Cisco IOS 12.2(37)EY Cisco IOS 12.2(37)EX Cisco IOS 12.2(35)EX1 Cisco IOS 12.2(33)SB Cisco IOS 12.2(31)SB5 Cisco IOS 12.2(28)SB7 Cisco IOS 12.2(25)S13 Cisco IOS 12.2(25)EWA11 Cisco IOS 12.2(25)EWA10 Cisco IOS 12.2(20)S14 Cisco IOS 12.2(18)S13 Cisco IOS 12.2(15)MC2h Cisco IOS 12.2(14)S18 Cisco IOS 12.1YI Cisco IOS 12.1YH Cisco IOS 12.1YF Cisco IOS 12.1YD Cisco IOS 12.1YC Cisco IOS 12.1YB Cisco IOS 12.1XV Cisco IOS 12.1XU Cisco IOS 12.1(5)YI1 Cisco IOS 12.1(5)YI Cisco IOS 12.1(5)YH3 Cisco IOS 12.1(5)YH Cisco IOS 12.1(5)YF4 Cisco IOS 12.1(5)YF3 Cisco IOS 12.1(5)YF2 Cisco IOS 12.1(5)YF Cisco IOS 12.1(5)YE4 Cisco IOS 12.1(5)YC2 Cisco IOS 12.1(5)YB5
Not Vulnerable:

Cisco IOS Dual-stack Router IPv6 Denial Of Service Vulnerability

Cisco IOS-based dual-stack routers are prone to a denial-of-service vulnerability. This issue can occur when a specially crafted IPv6 packet is sent to the device. However, for an exploit to succeed, the device must have certain IPv4 UDP services enabled.

A successful exploit may cause the affected interface to stop responding, or in some scenarios, may crash the device.

Cisco has assigned Bug ID CSCse56501 to this vulnerability.

Cisco IOS Dual-stack Router IPv6 Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco IOS Dual-stack Router IPv6 Denial Of Service Vulnerability

Solution:
Cisco has released an advisory. Please see the references for details.

Cisco IOS Dual-stack Router IPv6 Denial Of Service Vulnerability

References:

• Cisco IOS User Datagram Protocol Delivery Issue For IPv4/IPv6 Dual-stack Routers (Cisco)
  
• Cisco Security Advisory: Cisco IOS User Datagram Protocol Delivery Issue For IPv (Cisco Systems Product Security Incident Response Team )