CVE-2018-0158

🗓️ 28 Mar 2018 22:00:29Reported by [email protected]Type

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IKEv2 packets

Reporter	Title	Published	Views	Family All 18
Tenable Nessus	Cisco Ios Missing Release of Resource after Effective Lifetime	8 Nov 201900:00	–	nessus
Tenable Nessus	Cisco IOS Software Internet Key Exchange Memory Leak (cisco-sa-20180328-ike)	27 Nov 201900:00	–	nessus
Tenable Nessus	Cisco IOS XE Software Internet Key Exchange Memory Leak (cisco-sa-20180328-ike)	27 Nov 201900:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix and ArmorStratix Switches Use of Externally-Controlled Format String (CVE-2018-0175)	15 Nov 202300:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix and ArmorStratix Switches Improper Input Validation (CVE-2018-0173)	15 Nov 202300:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix and ArmorStratix Switches Improper Input Validation (CVE-2018-0174)	15 Nov 202300:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix and ArmorStratix Switches Improper Input Validation (CVE-2018-0158)	15 Nov 202300:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix and ArmorStratix Switches Improper Input Validation (CVE-2018-0172)	15 Nov 202300:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix and ArmorStratix Switches Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2018-0167)	15 Nov 202300:00	–	nessus
Prion	Design/Logic Flaw	28 Mar 201822:29	–	prion

Nvd

Node

cisco iosMatch15.5\(3\)s1.1

cisco iosMatch15.5\(3\)s1.2

cisco iosMatch15.5\(3\)s1.4

cisco iosMatch15.5\(3\)s1.5

cisco iosMatch15.5\(3\)s1.7

cisco iosMatch15.5\(3\)s1.8

cisco iosMatch15.5\(3\)s1.9

cisco iosMatch15.5\(3\)s1.10

cisco iosMatch15.5\(3\)s1.11

cisco iosMatch15.5\(3\)s1.12

AND

cisco asr_1001-hxMatch-

cisco asr_1001-xMatch-

cisco asr_1002-hxMatch-

cisco asr_1002-xMatch-

cisco asr_1004Match-

cisco asr_1006Match-

cisco asr_1006-xMatch-

cisco asr_1009-xMatch-

cisco asr_1013Match-

Node

cisco ios_xeMatch15.5\(3\)s1.1

cisco ios_xeMatch15.5\(3\)s1.2

cisco ios_xeMatch15.5\(3\)s1.4

cisco ios_xeMatch15.5\(3\)s1.5

cisco ios_xeMatch15.5\(3\)s1.7

cisco ios_xeMatch15.5\(3\)s1.8

cisco ios_xeMatch15.5\(3\)s1.9

cisco ios_xeMatch15.5\(3\)s1.10

cisco ios_xeMatch15.5\(3\)s1.11

cisco ios_xeMatch15.5\(3\)s1.12

AND

cisco asr_1001-hxMatch-

cisco asr_1001-xMatch-

cisco asr_1002-hxMatch-

cisco asr_1002-xMatch-

cisco asr_1004Match-

cisco asr_1006Match-

cisco asr_1006-xMatch-

cisco asr_1009-xMatch-

cisco asr_1013Match-

Node

cisco iosMatch15.5\(3\)s1.1

cisco iosMatch15.5\(3\)s1.2

cisco iosMatch15.5\(3\)s1.4

cisco iosMatch15.5\(3\)s1.5

cisco iosMatch15.5\(3\)s1.7

cisco iosMatch15.5\(3\)s1.8

cisco iosMatch15.5\(3\)s1.9

cisco iosMatch15.5\(3\)s1.10

cisco iosMatch15.5\(3\)s1.11

cisco iosMatch15.5\(3\)s1.12

cisco ios_xeMatch15.5\(3\)s1.1

cisco ios_xeMatch15.5\(3\)s1.2

cisco ios_xeMatch15.5\(3\)s1.4

cisco ios_xeMatch15.5\(3\)s1.5

cisco ios_xeMatch15.5\(3\)s1.7

cisco ios_xeMatch15.5\(3\)s1.8

cisco ios_xeMatch15.5\(3\)s1.9

cisco ios_xeMatch15.5\(3\)s1.10

cisco ios_xeMatch15.5\(3\)s1.11

cisco ios_xeMatch15.5\(3\)s1.12

AND

rockwellautomation allen-bradley_stratix_5900Match-

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike
securitytracker	www.securitytracker.com/id/1040595
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-107-03
securityfocus	www.securityfocus.com/bid/103566
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-107-04

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

28 Mar 2018 22:29Current

8.9High risk

Vulners AI Score8.9

CVSS27.8

CVSS38.6

EPSS0.12018