CVE-2004-1111 Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue inst...
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 12.2(14)sz | No fix listed |
| cisco ios | = 12.2(18)ew | No fix listed |
| cisco ios | = 12.2(18)ewa | No fix listed |
| cisco ios | = 12.2(18)s | No fix listed |
| cisco ios | = 12.2(18)se | No fix listed |
| cisco ios | = 12.2(18)sv | No fix listed |
| cisco ios | = 12.2(18)sw | No fix listed |
| cisco ios | = 12.2(20)ew | No fix listed |
| cisco multiservice platform 2650 | All versions | No fix listed |
| cisco multiservice platform 2650xm | All versions | No fix listed |
| cisco multiservice platform 2651 | All versions | No fix listed |
| cisco multiservice platform 2651xm | All versions | No fix listed |
| cisco 7200 router | All versions | No fix listed |
| cisco 7300 router | All versions | No fix listed |
| cisco 7500 router | All versions | No fix listed |
| cisco 7600 router | All versions | No fix listed |
| cisco catalyst 7600 | All versions | No fix listed |
References
- P-034 government-resource third-party-advisory
- 20041110 Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service vendor-advisory
- VU#630104 third-party-advisory us-government-resource
- TA04-316A third-party-advisory us-government-resource
- cisco-ios-dhcp-dos(18021) vdb-entry
- oval:org.mitre.oval:def:5632 signature vdb-entry