Cisco Ios Improper Restriction of Operations within the Bounds of a Memory Buffer

2019-11-0800:00:00

www.tenable.com

0.005 Low

EPSS

Percentile

76.5%

JSON

Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCuo17183, CSCvd73487.

File data ot_500175.nasl

VendorProductVersionCPE
ciscoios5.2.0.basecpe:2.3:o:cisco:ios:5.2.0.base:*:*:*:*:*:*:*
ciscoios_xe5.2.0.basecpe:2.3:o:cisco:ios_xe:5.2.0.base:*:*:*:*:*:*:*
ciscoios_xr5.2.0.basecpe:2.3:o:cisco:ios_xr:5.2.0.base:*:*:*:*:*:*:*
ciscoasr_9001-cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*
ciscoasr_9006-cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*
ciscoasr_9010-cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*
ciscoasr_9904-cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*
ciscoasr_9906-cpe:2.3:h:cisco:asr_9906:-:*:*:*:*:*:*:*
ciscoasr_9910-cpe:2.3:h:cisco:asr_9910:-:*:*:*:*:*:*:*
ciscoasr_9912-cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	5.2.0.base	cpe:2.3:o:cisco:ios:5.2.0.base:::::::*
cisco	ios_xe	5.2.0.base	cpe:2.3:o:cisco:ios_xe:5.2.0.base:::::::*
cisco	ios_xr	5.2.0.base	cpe:2.3:o:cisco:ios_xr:5.2.0.base:::::::*
cisco	asr_9001	-	cpe:2.3:h:cisco:asr_9001:-:::::::*
cisco	asr_9006	-	cpe:2.3:h:cisco:asr_9006:-:::::::*
cisco	asr_9010	-	cpe:2.3:h:cisco:asr_9010:-:::::::*
cisco	asr_9904	-	cpe:2.3:h:cisco:asr_9904:-:::::::*
cisco	asr_9906	-	cpe:2.3:h:cisco:asr_9906:-:::::::*
cisco	asr_9910	-	cpe:2.3:h:cisco:asr_9910:-:::::::*
cisco	asr_9912	-	cpe:2.3:h:cisco:asr_9912:-:::::::*