Miembros de
Boletines de Vulnerabilidades |
Cisco IOS and IOS XE Software IKEv1 State Machine Denial of Service Vulnerability |
|
| Software afectado | Cisco |
|
A vulnerability in the Internet Key Exchange (IKEv1) state machine of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to tear down valid IPsec connections, resulting in a partial denial of service (DoS) condition.The vulnerability is due to insufficient condition checks in the IKEv1 state machine. An attacker could exploit this vulnerability by sending a spoofed, specific IKEv1 packet to an endpoint of an IPsec tunnel. A successful exploit could allow the More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151218-ios?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20IOS%20and%20IOS%20XE%20Software%20IKEv1%20State%20Machine%20Denial%20o |
|
