Denial of Service Vulnerability in Cisco StarOS on Virtual Platforms

CVE-2018-0369

What is CVE-2018-0369?

A vulnerability exists in the reassembly logic for fragmented IPv4 packets in Cisco StarOS, affecting virtual platforms. This issue may allow an unauthenticated remote attacker to exploit the system by sending crafted IPv4 packets. If successfully exploited, the attacker can trigger a reload of the npusim process, which can lead to a denial of service condition. As there are multiple instances of the npusim process managing traffic, an attacker may affect all instances simultaneously, resulting in impacted service availability during the brief restart period. This vulnerability is particularly concerning for organizations using Cisco's virtual packet core solutions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References