Cisco Intrusion Prevention System IP Logging Denial of Service Vulnerability

A vulnerability in the IP logging feature of Cisco Intrusion Prevention System (IPS) Software could allow
an unauthenticated, remote attacker to cause a reload of the affected
system.

The vulnerability is due to a race condition when
writing the IP logging file. An attacker could exploit this
vulnerability by sending traffic through the sensor that would hit the rule configured with the IP logging feature.

Cisco has confirmed the vulnerability in a security notice and released software updates.

To exploit this vulnerability, the IP logging feature must be configured on a targeted device, and the attacker may need to acquire additional information about whether this feature is enabled. In addition, the attacker may need access to trusted, internal networks in which the targeted device may reside to send traffic to hit the rule configured with the IP logging feature.

Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.