Details of VAR-201804-1002

ID

VAR-201804-1002

CVE

CVE-2018-0256

TITLE

Cisco Packet Data Network Gateway Input Validation Vulnerability

Trust: 2.0

sources: CNVD: CNVD-2018-09393 // JVNDB: JVNDB-2018-004411 // CNNVD: CNNVD-201804-1094

DESCRIPTION

A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow an unauthenticated, remote attacker to cause the Session Manager (SESSMGR) process on an affected device to restart, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect validation of peer-to-peer packet headers. An attacker could exploit this vulnerability by sending a crafted peer-to-peer packet through an affected device. A successful exploit could allow the attacker to cause the SESSMGR process on the affected device to restart unexpectedly, which could briefly impact traffic while the SESSMGR process restarts and result in a DoS condition. Cisco Bug IDs: CSCvg88786. Vendors have confirmed this vulnerability Bug ID CSCvg88786 It is released as.Service operation interruption (DoS) There is a possibility of being put into a state

Trust: 2.52

sources: NVD: CVE-2018-0256 // JVNDB: JVNDB-2018-004411 // CNVD: CNVD-2018-09393 // BID: 103951 // VULHUB: VHN-118458

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2018-09393

AFFECTED PRODUCTS

vendor:	cisco	model:	asr 5000 series software	scope:	eq	version:	p2p_2.16.879	Trust: 1.6
vendor:	cisco	model:	asr 5000 series software	scope:	eq	version:	20.3.0.66671	Trust: 1.6
vendor:	cisco	model:	asr 5000 series software	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	packet data network gateway	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	packet data network gateway	scope:	eq	version:	0	Trust: 0.3
vendor:	cisco	model:	asr series p2p 2.16.879	scope:	eq	version:	5000	Trust: 0.3
vendor:	cisco	model:	asr series	scope:	eq	version:	500020.3.0.66671	Trust: 0.3

sources: CNVD: CNVD-2018-09393 // BID: 103951 // JVNDB: JVNDB-2018-004411 // CNNVD: CNNVD-201804-1094 // NVD: CVE-2018-0256

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2018-0256
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2018-0256
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2018-09393
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201804-1094
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-118458
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2018-0256
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2018-09393
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-118458
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2018-0256
baseSeverity:	MEDIUM
baseScore:	5.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	LOW
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.0
Trust: 1.8

sources: CNVD: CNVD-2018-09393 // VULHUB: VHN-118458 // JVNDB: JVNDB-2018-004411 // CNNVD: CNNVD-201804-1094 // NVD: CVE-2018-0256

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.9

sources: VULHUB: VHN-118458 // JVNDB: JVNDB-2018-004411 // NVD: CVE-2018-0256

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201804-1094

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-201804-1094

CONFIGURATIONS

sources: JVNDB: JVNDB-2018-004411

PATCH

title:	cisco-sa-20180418-pdng	url:	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-pdng	Trust: 0.8
title:	CiscoPacketDataNetworkGateway enters patches for verification vulnerabilities	url:	https://www.cnvd.org.cn/patchInfo/show/128727	Trust: 0.6
title:	Cisco Packet Data Network Gateway Enter the fix for the verification vulnerability	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=81389	Trust: 0.6

sources: CNVD: CNVD-2018-09393 // JVNDB: JVNDB-2018-004411 // CNNVD: CNNVD-201804-1094

EXTERNAL IDS

db:	NVD	id:	CVE-2018-0256	Trust: 3.4
db:	BID	id:	103951	Trust: 2.6
db:	JVNDB	id:	JVNDB-2018-004411	Trust: 0.8
db:	CNVD	id:	CNVD-2018-09393	Trust: 0.6
db:	CNNVD	id:	CNNVD-201804-1094	Trust: 0.6
db:	VULHUB	id:	VHN-118458	Trust: 0.1

sources: CNVD: CNVD-2018-09393 // VULHUB: VHN-118458 // BID: 103951 // JVNDB: JVNDB-2018-004411 // CNNVD: CNNVD-201804-1094 // NVD: CVE-2018-0256

REFERENCES

url:	https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20180418-pdng	Trust: 2.6
url:	http://www.securityfocus.com/bid/103951	Trust: 1.7
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-0256	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2018-0256	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3

sources: CNVD: CNVD-2018-09393 // VULHUB: VHN-118458 // BID: 103951 // JVNDB: JVNDB-2018-004411 // CNNVD: CNNVD-201804-1094 // NVD: CVE-2018-0256

CREDITS

Cisco

Trust: 0.3

sources: BID: 103951

SOURCES

db:	CNVD	id:	CNVD-2018-09393
db:	VULHUB	id:	VHN-118458
db:	BID	id:	103951
db:	JVNDB	id:	JVNDB-2018-004411
db:	CNNVD	id:	CNNVD-201804-1094
db:	NVD	id:	CVE-2018-0256

LAST UPDATE DATE

2024-11-23T23:12:12.514000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2018-09393	date:	2018-05-14T00:00:00
db:	VULHUB	id:	VHN-118458	date:	2019-10-09T00:00:00
db:	BID	id:	103951	date:	2018-04-18T00:00:00
db:	JVNDB	id:	JVNDB-2018-004411	date:	2018-06-19T00:00:00
db:	CNNVD	id:	CNNVD-201804-1094	date:	2019-10-17T00:00:00
db:	NVD	id:	CVE-2018-0256	date:	2024-11-21T03:37:49.710

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2018-09393	date:	2018-05-14T00:00:00
db:	VULHUB	id:	VHN-118458	date:	2018-04-19T00:00:00
db:	BID	id:	103951	date:	2018-04-18T00:00:00
db:	JVNDB	id:	JVNDB-2018-004411	date:	2018-06-19T00:00:00
db:	CNNVD	id:	CNNVD-201804-1094	date:	2018-04-19T00:00:00
db:	NVD	id:	CVE-2018-0256	date:	2018-04-19T20:29:01.253