7.8 - cisco-sa-20180328-fwip

A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a device to reload.

The vulnerability is due to the way fragmented packets are handled in the firewall code. An attacker could exploit this vulnerability by sending fragmented IP Version 4 or IP Version 6 packets through an affected device. An exploit could allow the attacker to cause the device to crash, resulting in a denial of service (DoS) condition.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-fwip ["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-fwip"] This advisory is part of the March 28, 2018, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 20 Cisco Security Advisories that describe 22 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: March 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://tools.cisco.com/security/center/viewErp.x?alertId=ERP-66682"].

BEGIN PGP SIGNATURE

iQJ5BAEBAgBjBQJau70yXBxDaXNjbyBQcm9kdWN0IFNlY3VyaXR5IEluY2lkZW50 IFJlc3BvbnNlIFRlYW0gKENpc2NvIFBTSVJUIGtleSAyMDE4LTIwMTkpIDxwc2ly dEBjaXNjby5jb20+AAoJEJa12PPJBfczDBEP/RALZPCkV6ed50o5F8F5n4SlCAdj aspUIg/zSxaNqmnOrIm2QOOsbybQ0wXjx/AviwqLY7OYrKYxyxSHNHNh2e9OjqY4 QDjtV5Jarvg0G3K8ImL88D2l5LcmwPwlk5TSAGy1Pr22alWa+U4f7MU8i7aMmWSm 2bIPVHlideds8f8qgBJLZMI0ylc6kzCEOrAaQj4/n1TktPWIv7/IyrzmP3yvcCtm akA/qiVDT2oNWc43S4btrxZ/n7LSLcuFy3oS67X6kHRjklOyS+sbsWbphvdbT0wi x9r7Ma+DSBH96A4g0s8peDcoB74F0uEC13+kztU+s1W7WIgdR8d5JTdyag0g2bYT 7tJJKALWjeHYWAUycdgpLDZ126YIiFrQzlF/kVQHIovlxu4738vnhFl1nd9mVJig 9Zd9RcaTRK5c8e3ZtetLOWeJ1WQu6FeqYeJS8Ktc07A1DOxnPnIsR3T3UVmN2lhE KUsSPjonhPNU4wgweru9/MO+APOKaNJfsvI20f3mUDUJAiZyEN0H6E/O5xJL/xAV 4/mVqEOv3Y5NkpJMSx6z+MOaZexxtfzVZKpOg7sCiS4A9Gm6qFjKwObEwz65wHsb jI2e58gaFI2yfOKBWa23QVSVN5OeBhSNv5WBb+MJcehTBWGHStoIvx93dT/c1TFJ qPwHyK68+go/Fmxi =+m+c END PGP SIGNATURE

_______________________________________________ cust-security-announce mailing list cust-security-announce@cisco.com To unsubscribe, send the command "unsubscribe" in the subject of your message to cust-security-announce-leave@cisco.com