CVE-2018-0158

🗓️ 28 Mar 2018 22:00:00Reported by ciscoType

A vulnerability in the IKEv2 module of Cisco IOS and IOS XE could lead to memory leaks or device reload, causing a denial of service (DoS) condition

Reporter	Title	Published	Views	Family All 19
ATTACKERKB	CVE-2018-0158	28 Mar 201800:00	–	attackerkb
BDU FSTEC	The vulnerability of the Internet Key Exchange version 2 (IKEv2) function in Cisco IOS operating systems allows a hacker to induce a service failure.	1 Jul 202200:00	–	bdu_fstec
Circl	CVE-2018-0158	14 Jun 202321:10	–	circl
CISA KEV Catalog	Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability	3 Mar 202200:00	–	cisa_kev
Cisco	Cisco IOS and IOS XE Software Internet Key Exchange Memory Leak Vulnerability	28 Mar 201816:00	–	cisco
Tenable Nessus	Cisco IOS Software Internet Key Exchange Memory Leak (cisco-sa-20180328-ike)	27 Nov 201900:00	–	nessus
Tenable Nessus	Cisco IOS XE Software Internet Key Exchange Memory Leak (cisco-sa-20180328-ike)	27 Nov 201900:00	–	nessus
Tenable Nessus	Cisco Ios Missing Release of Resource after Effective Lifetime	8 Nov 201900:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix Services Router Improper Input Validation (CVE-2018-0158)	15 Nov 202300:00	–	nessus
CNVD	Cisco IOS Software and IOS XE Software Internet Key Exchange Version 2 Module Input Authentication Vulnerability	3 Apr 201800:00	–	cnvd

[
  {
    "product": "Cisco IOS and IOS XE",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco IOS and IOS XE"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1040595
securityfocus	www.securityfocus.com/bid/103566
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-107-04
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-107-03

19 Apr 2018 13:57Current

8.9High risk

Vulners AI Score8.9

EPSS0.14558

CWE-20