Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2018-0471 Details

Description

A vulnerability in the Cisco Discovery Protocol (CDP) module of Cisco IOS XE Software Releases 16.6.1 and 16.6.2 could allow an unauthenticated, adjacent attacker to cause a memory leak that may lead to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain CDP packets. An attacker could exploit this vulnerability by sending certain CDP packets to an affected device. A successful exploit could cause an affected device to continuously consume memory and eventually result in a memory allocation failure that leads to a crash, triggering a reload of the affected device.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.4 HIGHVector:CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-cdp-memleak CVEVendor Advisory
http://www.securityfocus.com/bid/105398 CVEThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041737 CVEThird Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-cdp-memleak [email protected]Vendor Advisory
http://www.securityfocus.com/bid/105398 [email protected]Third Party AdvisoryVDB Entry

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-772Missing Release of Resource after Effective Lifetime[email protected]
CWE-400Uncontrolled Resource Consumption[email protected]

Affected Products

ProductVersions
cisco ios xe
16.6.1
16.6.2

CPE

  • cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

13 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2018-0471
NVD Published Date:
Oct 5, 2018
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2018-0471 Details - Not Deferred