Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.105773
Category:CISCO
Title:Cisco IOS Software Link Layer Discovery Protocol Processing Code Denial of Service Vulnerability
Summary:A vulnerability in the Link Layer Discovery Protocol (LLDP) packet processing code of Cisco IOS;could allow an unauthenticated, adjacent attacker to cause the crash of an affected device.;;The vulnerability is due to improper handling of crafted LLDP packets. An attacker could exploit;this vulnerability by sending a specially crafted LLDP packet. An exploit could allow the attacker;to cause a Denial of Service (DoS) condition on an affected platform.;;Cisco has released software updates that address this vulnerability. There are no workarounds that;address this vulnerability.
Description:Summary:
A vulnerability in the Link Layer Discovery Protocol (LLDP) packet processing code of Cisco IOS
could allow an unauthenticated, adjacent attacker to cause the crash of an affected device.

The vulnerability is due to improper handling of crafted LLDP packets. An attacker could exploit
this vulnerability by sending a specially crafted LLDP packet. An exploit could allow the attacker
to cause a Denial of Service (DoS) condition on an affected platform.

Cisco has released software updates that address this vulnerability. There are no workarounds that
address this vulnerability.

Solution:
See the referenced vendor advisory for a solution.

CVSS Score:
6.1

CVSS Vector:
AV:A/AC:L/Au:N/C:N/I:N/A:C

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2016-1425
BugTraq ID: 91545
http://www.securityfocus.com/bid/91545
Cisco Security Advisory: 20160617 Cisco IOS Software Link Layer Discovery Protocol Processing Code Denial of Service Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-ios1
http://www.securitytracker.com/id/1036129
CopyrightCopyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.