CVE-2018-0466

Cisco IOS and IOS XE Software OSPFv3 Denial of Service Vulnerability

State: Published
Severity: Not scored
Published: Oct 5, 2018
Updated: Nov 26, 2024
Reserved: Nov 27, 2017

Description

A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect handling of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending crafted OSPFv3 Link-State Advertisements (LSA) to an affected device. An exploit could allow the attacker to cause an affected device to reload, leading to a denial of service (DoS) condition.

Scores

The record has no CVSS score.

Weaknesses

CWE-399

Affected Products

Product	Versions
Cisco IOS SoftwareCisco	n/aAffected

References

105403vdb-entry
20180926 Cisco IOS and IOS XE Software OSPFv3 Denial of Service Vulnerabilityvendor-advisory
1041737vdb-entry
https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.