ID
VAR-202102-0686
CVE
CVE-2021-1378
TITLE
Cisco StarOS Resource Depletion Vulnerability
Trust: 0.8
DESCRIPTION
A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The vulnerability is due to a logic error that may occur under specific traffic conditions. An attacker could exploit this vulnerability by sending a series of crafted packets to an affected device. A successful exploit could allow the attacker to prevent the targeted service from receiving any traffic, which would lead to a DoS condition on the affected device. Cisco StarOS Is vulnerable to a resource exhaustion.Denial of service (DoS) It may be put into a state. Cisco StarOS operating system is an operating system of Cisco in the United States. Provide subscriber management service for mobile packet core network. There is a resource management error vulnerability in the Cisco StarOS operating system, which originates from improper management of system resources (such as memory, disk space, files, etc.) by network systems or products
Trust: 1.71
AFFECTED PRODUCTS
| vendor: | cisco | model: | staros | scope: | gte | version: | 21.9.0 | Trust: 1.0 |
| vendor: | cisco | model: | staros | scope: | lte | version: | 21.19.10 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco staros | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco staros | scope: | eq | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-400 | Trust: 1.1 |
| problemtype: | Resource exhaustion (CWE-400) [ Other ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
resource management error
Trust: 0.6
PATCH
| title: | cisco-sa-StarOS-DoS-RLLvGFJj | url: | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-StarOS-DoS-RLLvGFJj | Trust: 0.8 |
| title: | Cisco StarOS operating system Remediation of resource management error vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=142816 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-1378 | Trust: 2.5 |
| db: | JVNDB | id: | JVNDB-2021-003810 | Trust: 0.8 |
| db: | AUSCERT | id: | ESB-2021.0600 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202102-1275 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-374432 | Trust: 0.1 |
REFERENCES
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-staros-dos-rllvgfjj | Trust: 2.3 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-1378 | Trust: 0.8 |
| url: | https://www.auscert.org.au/bulletins/esb-2021.0600 | Trust: 0.6 |
SOURCES
| db: | VULHUB | id: | VHN-374432 |
| db: | JVNDB | id: | JVNDB-2021-003810 |
| db: | CNNVD | id: | CNNVD-202102-1275 |
| db: | NVD | id: | CVE-2021-1378 |
LAST UPDATE DATE
2024-11-23T21:51:02.830000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-374432 | date: | 2021-02-24T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-003810 | date: | 2021-11-05T05:16:00 |
| db: | CNNVD | id: | CNNVD-202102-1275 | date: | 2021-03-01T00:00:00 |
| db: | NVD | id: | CVE-2021-1378 | date: | 2024-11-21T05:44:13.047 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-374432 | date: | 2021-02-17T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-003810 | date: | 2021-11-05T00:00:00 |
| db: | CNNVD | id: | CNNVD-202102-1275 | date: | 2021-02-17T00:00:00 |
| db: | NVD | id: | CVE-2021-1378 | date: | 2021-02-17T17:15:13.583 |