Denial of Service Vulnerability in Cisco Prime Network Registrar

CVE-2017-6613

Summary

A vulnerability exists in the DNS input packet processor of Cisco Prime Network Registrar which could allow an unauthenticated, remote attacker to exploit the system. When a malformed DNS packet is sent to the application, insufficient validation of the DNS packet header occurs. This exploitation can cause the DNS process to restart unexpectedly, potentially resulting in a denial of service condition. All versions of Cisco Prime Network Registrar prior to 8.3.5 are affected, highlighting the importance of applying the recommended updates to maintain system stability.

References