Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

Bugtraq ID:	97935
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-3860 CVE-2017-3861 CVE-2017-3862 CVE-2017-3863
Remote:	Yes
Local:	No
Published:	Apr 19 2017 12:00AM
Updated:	May 02 2017 01:07AM
Credit:	Cisco
Vulnerable:	Cisco IOS XE Software 0 Cisco IOS 12.2(55)SE1 Cisco Industrial Ethernet 3000 Series Switches 15.2(3.2.17)E1 Cisco Industrial Ethernet 3000 Series Switches 15.2(3.2.16)E1 Cisco Catalyst 3850 Series Switches 15.5(3) Cisco Catalyst 3850 Series Switches 15.2(3.7.1) Cisco Catalyst 3750-X Series Switches 15.5(3)
Not Vulnerable:	Cisco Ios 3.7(1)E Cisco Ios 16.2(0.31) Cisco Ios 16.1(0.339) Cisco Ios 15.2(5.6.2)E Cisco Ios 15.2(5.5.64)E Cisco Ios 15.2(5.5.54)E Cisco Ios 15.2(5.5.52)E Cisco Ios 15.2(5.1.1)E Cisco Ios 15.2(5.0)ST Cisco Ios 15.2(4.0.64a)E Cisco Ios 15.2(4.0)ST Cisco Ios 15.2(3)E1 Cisco Ios 15.2(2)E6 Cisco Ios 15.0(2a)EX5 Cisco Industrial Ethernet 3000 Series Switches 3.7(1)E Cisco Industrial Ethernet 3000 Series Switches 16.2(0.31) Cisco Industrial Ethernet 3000 Series Switches 16.1(0.339) Cisco Industrial Ethernet 3000 Series Switches 15.2(5.6.2)E Cisco Industrial Ethernet 3000 Series Switches 15.2(5.5.64)E Cisco Industrial Ethernet 3000 Series Switches 15.2(5.5.54)E Cisco Industrial Ethernet 3000 Series Switches 15.2(5.5.52)E Cisco Industrial Ethernet 3000 Series Switches 15.2(5.1.1)E Cisco Industrial Ethernet 3000 Series Switches 15.2(5.0)ST Cisco Industrial Ethernet 3000 Series Switches 15.2(4.0.64a)E Cisco Industrial Ethernet 3000 Series Switches 15.2(4.0)ST Cisco Industrial Ethernet 3000 Series Switches 15.2(3)E2 Cisco Industrial Ethernet 3000 Series Switches 15.2(3)E1 Cisco Industrial Ethernet 3000 Series Switches 15.2(2)E6 Cisco Catalyst 3850 Series Switches Denali-11.3.1 Cisco Catalyst 3850 Series Switches 3.8(0)E Cisco Catalyst 3850 Series Switches 16.3(0.71) Cisco Catalyst 3850 Series Switches 16.2(2.36) Cisco Catalyst 3850 Series Switches 16.2(2.25) Cisco Catalyst 3850 Series Switches 16.2(0.16) Cisco Catalyst 3850 Series Switches 16.1(0.339) Cisco Catalyst 3850 Series Switches 15.2(5.6.2)E Cisco Catalyst 3850 Series Switches 15.2(5.5.64)E Cisco Catalyst 3850 Series Switches 15.2(5.5.54)E Cisco Catalyst 3850 Series Switches 15.2(5.5.52)E Cisco Catalyst 3850 Series Switches 15.2(5.1.1)E Cisco Catalyst 3850 Series Switches 15.2(5.0)ST Cisco Catalyst 3850 Series Switches 15.2(4.0.64a)E Cisco Catalyst 3850 Series Switches 15.2(4.0.15)E Cisco Catalyst 3850 Series Switches 15.2(4.0)ST Cisco Catalyst 3850 Series Switches 15.2(4)E Cisco Catalyst 3850 Series Switches 15.2(3)E2 Cisco Catalyst 3850 Series Switches 15.2(2)E6 Cisco Catalyst 3850 Series Switches 11.3(1) Cisco Catalyst 3750-X Series Switches Denali-11.3.1 Cisco Catalyst 3750-X Series Switches 3.7(4)E Cisco Catalyst 3750-X Series Switches 16.3(0.71) Cisco Catalyst 3750-X Series Switches 16.2(2.36) Cisco Catalyst 3750-X Series Switches 16.2(2.25) Cisco Catalyst 3750-X Series Switches 15.2(5.6.1)E Cisco Catalyst 3750-X Series Switches 15.2(5.5.36)E Cisco Catalyst 3750-X Series Switches 15.2(5.0.34)E Cisco Catalyst 3750-X Series Switches 15.2(4.2.1)EA2 Cisco Catalyst 3750-X Series Switches 15.2(4.1.5a)E Cisco Catalyst 3750-X Series Switches 15.2(4.1.25)EA1 Cisco Catalyst 3750-X Series Switches 15.2(4.0.95a)E Cisco Catalyst 3750-X Series Switches 15.2(4.0.95)EA1 Cisco Catalyst 3750-X Series Switches 15.2(4)EA5 Cisco Catalyst 3750-X Series Switches 15.2(4)EA1 Cisco Catalyst 3750-X Series Switches 15.2(4)E3 Cisco Catalyst 3750-X Series Switches 15.2(4)E2 Cisco Catalyst 3750-X Series Switches 15.2(4)E1 Cisco Catalyst 3750-X Series Switches 15.2(3)E4 Cisco Catalyst 3750-X Series Switches 15.2(2)E6 Cisco Catalyst 3750-X Series Switches 11.3(1)

Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

Cisco IOS and IOS XE Software are prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to cause an affected device to reload, denying service to legitimate users.

These issues are being tracked by Cisco Bug IDs CSCur29331, CSCut47751, CSCut50727 and CSCuu76493.

Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

To exploit these issues attackers can use readily available tools.

Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS and IOS XE Software Multiple Denial of Service Vulnerabilities

References:

• Cisco IOS Software (Cisco Systems)
  
• Cisco IOS and IOS XE Software EnergyWise Denial of Service Vulnerabilities (Cisco)