ID de Prueba:	1.3.6.1.4.1.25623.1.0.106311
Categoría:	CISCO
Título:	Cisco IOS Software Multicast Routing Denial of Service Vulnerabilities
Resumen:	Multiple vulnerabilities in the multicast subsystem of Cisco IOS Software;could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition. The issues;are in IPv4 Multicast Source Discovery Protocol (MSDP) and IPv6 Protocol Independent Multicast (PIM).
Descripción:	Summary: Multiple vulnerabilities in the multicast subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition. The issues are in IPv4 Multicast Source Discovery Protocol (MSDP) and IPv6 Protocol Independent Multicast (PIM). Vulnerability Insight: The first vulnerability (Cisco bug ID CSCud36767) is due to insufficient checking of MSDP Source-Active (SA) messages received from a configured MSDP peer. An attacker who can send traffic to the IPv4 address of a device could exploit this vulnerability by sending a packet designed to trigger the issue to the affected device. The second vulnerability (Cisco bug ID CSCuy16399) is due to insufficient checking of packets encapsulated in a PIM register message. An attacker who can send a malformed IPv6 PIM register packet to a PIM rendezvous point (RP) could exploit the vulnerability. Vulnerability Impact: A successful exploit could cause the affected device to restart. Solution: See the referenced vendor advisory for a solution. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6392 BugTraq ID: 93211 http://www.securityfocus.com/bid/93211 Cisco Security Advisory: 20160928 Cisco IOS and IOS XE Software Multicast Routing Denial of Service Vulnerabilities http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-msdp http://www.securitytracker.com/id/1036914 Common Vulnerability Exposure (CVE) ID: CVE-2016-6382 https://ics-cert.us-cert.gov/advisories/ICSA-16-287-04
Copyright	Copyright (C) 2016 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.