A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability occurs because the regular expression (regex) engine that is used with the Split DNS feature of affected releases may time out when it processes the DNS name list configuration. An attacker could exploit this vulnerability by trying to resolve an address or hostname that the affected device handles. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HCisco 1100 4g Integrated Services Router
HWCiscoall versionsCisco 1100 4gltegb Integrated Services Router
HWCiscoall versionsCisco 1100 4gltena Integrated Services Router
HWCiscoall versionsCisco 1100 4p Integrated Services Router
HWCiscoall versionsCisco 1100 6g Integrated Services Router
HWCiscoall versionsCisco 1100 8p Integrated Services Router
HWCiscoall versionsCisco 1100 Integrated Services Router
HWCiscoall versionsCisco 1100 Lte Integrated Services Router
HWCiscoall versionsCisco 1101 4p Integrated Services Router
HWCiscoall versionsCisco 1101 Integrated Services Router
HWCiscoall versionsCisco 1109 2p Integrated Services Router
HWCiscoall versionsCisco 1109 4p Integrated Services Router
HWCiscoall versionsCisco 1109 Integrated Services Router
HWCiscoall versionsCisco 1111x 8p Integrated Services Router
HWCiscoall versionsCisco 1111x Integrated Services Router
HWCiscoall versionsCisco 111x Integrated Services Router
HWCiscoall versionsCisco 1120 Integrated Services Router
HWCiscoall versionsCisco 1160 Integrated Services Router
HWCiscoall versionsCisco 4221 Integrated Services Router
HWCiscoall versionsCisco 4331 Integrated Services Router
HWCiscoall versionsCisco 4431 Integrated Services Router
HWCiscoall versionsCisco 4451 Integrated Services Router
HWCiscoall versionsCisco 4461 Integrated Services Router
HWCiscoall versionsCisco Asr 1000 X
HWCiscoall versionsCisco Asr 1001
HWCiscoall versionsCisco Asr1001 Hx
HWCiscoall versionsCisco Asr1001 Hx Rf
HWCiscoall versionsCisco Asr 1001 X
HWCiscoall versionsCisco Asr1001 X Rf
HWCiscoall versionsCisco Asr1001 X Ws
HWCiscoall versions
Related vulnerabilities
Cisco IOS XE Web UI — nieautoryzowane tworzenie konta z privilege 15
Buffer overflow w QoS Cisco IOS/IOS XE — RCE i DoS przez UDP 18999
RCE i DoS w funkcji Smart Install systemu Cisco IOS przez przepełnienie bufora
Buffer overflow w DHCP relay Cisco IOS — RCE bez uwierzytelnienia
RCE w Cisco IOS/IOS XE – podatność protokołu CMP przez Telnet