CVE-2018-15428 : A vulnerability in the implementation of Border Gateway Protocol (BGP) functiona

A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP update messages. An attacker could exploit this vulnerability by sending BGP update messages that include a specific, malformed attribute to be processed by an affected system. A successful exploit could allow the attacker to cause the BGP process to restart unexpectedly, resulting in a DoS condition. The Cisco implementation of BGP accepts incoming BGP traffic only from explicitly defined peers. To exploit this vulnerability, the malicious BGP update message would need to come from a configured, valid BGP peer, or would need to be injected by the attacker into the victim's BGP network on an existing, valid TCP connection to a BGP peer.

Published 2018-10-05 14:29:12

Updated 2019-10-09 23:35:36

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Input validationDenial of service

Products affected by CVE-2018-15428

Cisco » Ios Xr » Version: 6.0.1
cpe:2.3:o:cisco:ios_xr:6.0.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 6.1.1
cpe:2.3:o:cisco:ios_xr:6.1.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 6.2.1
cpe:2.3:o:cisco:ios_xr:6.2.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 6.1.2
cpe:2.3:o:cisco:ios_xr:6.1.2:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 6.1.3
cpe:2.3:o:cisco:ios_xr:6.1.3:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 6.0.2
cpe:2.3:o:cisco:ios_xr:6.0.2:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 6.2.2
cpe:2.3:o:cisco:ios_xr:6.2.2:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 6.4.1
cpe:2.3:o:cisco:ios_xr:6.4.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 6.1.4
cpe:2.3:o:cisco:ios_xr:6.1.4:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A
Cisco » Ios Xr » Version: 6.2.3
cpe:2.3:o:cisco:ios_xr:6.2.3:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 9001 » Version: N/A
When used together with: Cisco » Asr 9006 » Version: N/A
When used together with: Cisco » Asr 9010 » Version: N/A
When used together with: Cisco » Asr 9901 » Version: N/A
When used together with: Cisco » Asr 9904 » Version: N/A
When used together with: Cisco » Asr 9906 » Version: N/A
When used together with: Cisco » Asr 9910 » Version: N/A
When used together with: Cisco » Asr 9912 » Version: N/A
When used together with: Cisco » Asr 9922 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2018-15428

EPSS FAQ

0.10%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 42 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-15428

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:N/A:P	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
6.8	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H	2.2	4.0	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Changed Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2018-15428

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)

References for CVE-2018-15428

http://www.securitytracker.com/id/1041790

Cisco IOS XR BGP Processing Error Lets Remote Users Cause the Target System to Reload - SecurityTracker
Third Party Advisory;VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-iosxr-dos

Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2018-15428

Products affected by CVE-2018-15428

Exploit prediction scoring system (EPSS) score for CVE-2018-15428

CVSS scores for CVE-2018-15428

CWE ids for CVE-2018-15428

References for CVE-2018-15428