vulnwire
5.8med

CVE-2017-6613

A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to caus…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
5.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.0%
percentile 81%
Public exploits
0
none known

A vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to cause the DNS process to momentarily restart, which could lead to a partial denial of service (DoS) condition on the affected system. The vulnerability is due to incomplete DNS packet header validation when the packet is received by the application. An attacker could exploit this vulnerability by sending a malformed DNS packet to the application. An exploit could allow the attacker to cause the DNS process to restart, which could lead to a DoS condition. This vulnerability affects Cisco Prime Network Registrar on all software versions prior to 8.3.5. Cisco Bug IDs: CSCvb55412.

Exploit prediction (EPSS)

1.99% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.05.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

  • n/a Cisco Prime Network Registrar

Classification

Weakness
  • CWE-399 Resource Management Errors
  • CWE-20 Improper Input Validation

References

  • securityfocus.com /bid/97924 · vdb-entry, x_refsource_BID, x_transferred
  • tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20170419-prime-dns · x_refsource_CONFIRM, x_transferred
  • securitytracker.com /id/1038331 · vdb-entry, x_refsource_SECTRACK, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.