CVE-2018-0177 : A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Softw

A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IPv4 packets. An attacker could exploit this vulnerability by sending specific IPv4 packets to an IPv4 address on an affected device. A successful exploit could allow the attacker to cause high CPU utilization, traceback messages, or a reload of the affected device that leads to a DoS condition. If the switch does not reboot when under attack, it would require manual intervention to reload the device. This vulnerability affects Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches that are running Cisco IOS XE Software Release 16.1.1 or later, until the first fixed release, and are configured with an IPv4 address. Cisco Bug IDs: CSCvd80714.

Published 2018-03-28 22:29:01

Updated 2021-10-18 12:03:04

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2018-0177

Cisco » Ios Xe » Version: Denali-16.3.3
cpe:2.3:o:cisco:ios_xe:denali-16.3.3:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 4321 Integrated Services Router » Version: N/A
When used together with: Cisco » 4331 Integrated Services Router » Version: N/A
When used together with: Cisco » 4351 Integrated Services Router » Version: N/A
When used together with: Cisco » 4431 Integrated Services Router » Version: N/A
When used together with: Cisco » 4451-x Integrated Services Router » Version: N/A
When used together with: Cisco » Asr 1000 Series Route Processor (rp2) » Version: N/A
When used together with: Cisco » Asr 1000 Series Route Processor (rp3) » Version: N/A
When used together with: Cisco » Asr 1001-hx » Version: N/A
When used together with: Cisco » Asr 1001-x » Version: N/A
When used together with: Cisco » Asr 1002-hx » Version: N/A
When used together with: Cisco » Asr 1002-x » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-s » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-s » Version: N/A
When used together with: Cisco » Catalyst 3850-12s-e » Version: N/A
When used together with: Cisco » Catalyst 3850-12s-s » Version: N/A
When used together with: Cisco » Catalyst 3850-12xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-12xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-16xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-16xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24s-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24s-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-s » Version: N/A
When used together with: Cisco » Catalyst 3850-32xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-32xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-f-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-f-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-s » Version: N/A
When used together with: Cisco » Catalyst C3850-12x48u-e » Version: N/A
When used together with: Cisco » Catalyst C3850-12x48u-l » Version: N/A
When used together with: Cisco » Catalyst C3850-12x48u-s » Version: N/A
When used together with: Cisco » Cloud Services Router 1000v » Version: N/A
Cisco » Ios Xe » Version: Denali-16.3.1
cpe:2.3:o:cisco:ios_xe:denali-16.3.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 4321 Integrated Services Router » Version: N/A
When used together with: Cisco » 4331 Integrated Services Router » Version: N/A
When used together with: Cisco » 4351 Integrated Services Router » Version: N/A
When used together with: Cisco » 4431 Integrated Services Router » Version: N/A
When used together with: Cisco » 4451-x Integrated Services Router » Version: N/A
When used together with: Cisco » Asr 1000 Series Route Processor (rp2) » Version: N/A
When used together with: Cisco » Asr 1000 Series Route Processor (rp3) » Version: N/A
When used together with: Cisco » Asr 1001-hx » Version: N/A
When used together with: Cisco » Asr 1001-x » Version: N/A
When used together with: Cisco » Asr 1002-hx » Version: N/A
When used together with: Cisco » Asr 1002-x » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-s » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-s » Version: N/A
When used together with: Cisco » Catalyst 3850-12s-e » Version: N/A
When used together with: Cisco » Catalyst 3850-12s-s » Version: N/A
When used together with: Cisco » Catalyst 3850-12xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-12xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-16xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-16xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24s-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24s-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-s » Version: N/A
When used together with: Cisco » Catalyst 3850-32xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-32xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-f-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-f-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-s » Version: N/A
When used together with: Cisco » Catalyst C3850-12x48u-e » Version: N/A
When used together with: Cisco » Catalyst C3850-12x48u-l » Version: N/A
When used together with: Cisco » Catalyst C3850-12x48u-s » Version: N/A
When used together with: Cisco » Cloud Services Router 1000v » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-0177

EPSS FAQ

3.13%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 86 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-0177

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2018-0177

CWE-19

Assigned by: ykramarz@cisco.com (Secondary)

References for CVE-2018-0177

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ipv4

Cisco IOS XE Software for Cisco Catalyst Switches IPv4 Denial of Service Vulnerability
Vendor Advisory
http://www.securitytracker.com/id/1040588

Cisco Catalyst 3850 and 3650 Series Switches IPv4 Processing Flaw Lets Remote Users Consume Excessive CPU Resources on the Target System - SecurityTracker
Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/103563

Cisco IOS XE Software for Cisco Catalyst Switches CVE-2018-0177 Denial of Service Vulnerability
Third Party Advisory;VDB Entry

Jump to

Vulnerability Details : CVE-2018-0177

Products affected by CVE-2018-0177

Exploit prediction scoring system (EPSS) score for CVE-2018-0177

CVSS scores for CVE-2018-0177

CWE ids for CVE-2018-0177

References for CVE-2018-0177