CVE-2018-0472

Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability

State: Published
Severity: Not scored
Published: Oct 5, 2018
Updated: Nov 26, 2024
Reserved: Nov 27, 2017

Description

A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to improper processing of malformed IPsec Authentication Header (AH) or Encapsulating Security Payload (ESP) packets. An attacker could exploit this vulnerability by sending malformed IPsec packets to be processed by an affected device. An exploit could allow the attacker to cause a reload of the affected device.

Scores

The record has no CVSS score.

Weaknesses

CWE-20

Affected Products

Product	Versions
Cisco Adaptive Security Appliance (ASA) SoftwareCisco	n/aAffected

References

105418vdb-entry
1041737vdb-entry
1041735vdb-entry
20180926 Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerabilityvendor-advisory
https://ics-cert.us-cert.gov/advisories/ICSA-19-094-04

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.