Lucene search
CiscoCISCO-SA-20180926-PNP-MEMLEAKHistorySep 26, 2018 - 4:00 p.m.
Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak Vulnerability
2018-09-2616:00:00
tools.cisco.com
81
EPSS
0.002
Percentile
62.2%
A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device.
The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by sending invalid data to the Cisco Network Plug and Play agent on an affected device. A successful exploit could allow the attacker to cause a memory leak on the affected device, which could cause the device to reload.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-pnp-memleak [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-pnp-memleak”]
Affected configurations
Node
ciscoiosMatch15.2e
ORciscoiosMatch15.2ex
ORciscoiosMatch15.5s
ORciscoiosMatch15.2ea
ORciscoiosMatch15.5m
ORciscoiosMatch15.5sn
ORciscoiosMatch15.6s
ORciscoiosMatch15.6t
ORciscoiosMatch15.3jc
ORciscoiosMatch15.3sy
ORciscoiosMatch15.6sp
ORciscoiosMatch15.6sn
ORciscoiosMatch15.3jd
ORciscoiosMatch15.6m
ORciscoiosMatch15.2ec
ORciscoiosMatch15.4sy
ORciscoiosMatch15.3je
ORciscoiosMatch15.3jda
ORciscoiosMatch15.5sy
ORciscoiosMatch15.3jf
ORciscoiosMatch15.7m
ORciscoiosMatch15.3jg
ORciscoiosMatch15.3jh
ORciscoiosMatch12.2i
ORciscocisco_ios_xe_softwareMatch3.16s
ORciscocisco_ios_xe_softwareMatch3.17s
ORciscocisco_ios_xe_softwareMatch16.1
ORciscocisco_ios_xe_softwareMatch16.2
ORciscocisco_ios_xe_softwareMatch3.8e
ORciscocisco_ios_xe_softwareMatch16.3
ORciscocisco_ios_xe_softwareMatch16.4
ORciscocisco_ios_xe_softwareMatch16.5
ORciscocisco_ios_xe_softwareMatch3.18s
ORciscocisco_ios_xe_softwareMatch3.18sp
ORciscocisco_ios_xe_softwareMatch3.9e
ORciscocisco_ios_xe_softwareMatch16.6
ORciscocisco_ios_xe_softwareMatch16.7
ORciscocisco_ios_xe_softwareMatch16.8
ORciscocisco_ios_xe_softwareMatch3.10e
ORciscoiosMatch15.2\(4\)e
ORciscoiosMatch15.2\(4\)e1
ORciscoiosMatch15.2\(4\)e2
ORciscoiosMatch15.2\(4m\)e1
ORciscoiosMatch15.2\(5\)e
ORciscoiosMatch15.2\(4\)e3
ORciscoiosMatch15.2\(5a\)e
ORciscoiosMatch15.2\(5\)e1
ORciscoiosMatch15.2\(5b\)e
ORciscoiosMatch15.2\(4m\)e3
ORciscoiosMatch15.2\(5c\)e
ORciscoiosMatch15.2\(4n\)e2
ORciscoiosMatch15.2\(4o\)e2
ORciscoiosMatch15.2\(5a\)e1
ORciscoiosMatch15.2\(4\)e4
ORciscoiosMatch15.2\(5\)e2
ORciscoiosMatch15.2\(4p\)e1
ORciscoiosMatch15.2\(6\)e
ORciscoiosMatch15.2\(5\)e2b
ORciscoiosMatch15.2\(4\)e5
ORciscoiosMatch15.2\(5\)e2c
ORciscoiosMatch15.2\(4m\)e2
ORciscoiosMatch15.2\(4o\)e3
ORciscoiosMatch15.2\(4q\)e1
ORciscoiosMatch15.2\(6\)e0a
ORciscoiosMatch15.2\(6\)e1
ORciscoiosMatch15.2\(4\)e5a
ORciscoiosMatch15.2\(6\)e0c
ORciscoiosMatch15.2\(4\)e6
ORciscoiosMatch15.2\(6\)e1a
ORciscoiosMatch15.2\(6\)e1s
ORciscoiosMatch15.2\(4s\)e1
ORciscoiosMatch15.2\(4s\)e2
ORciscoiosMatch15.2\(5\)ex
ORciscoiosMatch15.5\(3\)s
ORciscoiosMatch15.5\(3\)s1
ORciscoiosMatch15.5\(3\)s1a
ORciscoiosMatch15.5\(3\)s2
ORciscoiosMatch15.5\(3\)s0a
ORciscoiosMatch15.5\(3\)s3
ORciscoiosMatch15.5\(3\)s4
ORciscoiosMatch15.5\(3\)s5
ORciscoiosMatch15.5\(3\)s6
ORciscoiosMatch15.5\(3\)s6a
ORciscoiosMatch15.5\(3\)s7
ORciscoiosMatch15.5\(3\)s6b
ORciscoiosMatch15.2\(4\)ea
ORciscoiosMatch15.2\(4\)ea1
ORciscoiosMatch15.2\(4\)ea3
ORciscoiosMatch15.2\(5\)ea
ORciscoiosMatch15.2\(4\)ea4
ORciscoiosMatch15.2\(4\)ea2
ORciscoiosMatch15.2\(4\)ea5
ORciscoiosMatch15.2\(4\)ea6
ORciscoiosMatch15.5\(3\)m
ORciscoiosMatch15.5\(3\)m1
ORciscoiosMatch15.5\(3\)m0a
ORciscoiosMatch15.5\(3\)m2
ORciscoiosMatch15.5\(3\)m2a
ORciscoiosMatch15.5\(3\)m3
ORciscoiosMatch15.5\(3\)m4
ORciscoiosMatch15.5\(3\)m4a
ORciscoiosMatch15.5\(3\)m5
ORciscoiosMatch15.5\(3\)m4b
ORciscoiosMatch15.5\(3\)m4c
ORciscoiosMatch15.5\(3\)m6
ORciscoiosMatch15.5\(3\)m7
ORciscoiosMatch15.5\(3\)m6a
ORciscoiosMatch15.5\(3\)sn0a
ORciscoiosMatch15.5\(3\)sn
ORciscoiosMatch15.6\(1\)s
ORciscoiosMatch15.6\(2\)s
ORciscoiosMatch15.6\(2\)s1
ORciscoiosMatch15.6\(1\)s1
ORciscoiosMatch15.6\(1\)s2
ORciscoiosMatch15.6\(2\)s2
ORciscoiosMatch15.6\(1\)s3
ORciscoiosMatch15.6\(2\)s3
ORciscoiosMatch15.6\(1\)s4
ORciscoiosMatch15.6\(2\)s4
ORciscoiosMatch15.6\(1\)t
ORciscoiosMatch15.6\(2\)t
ORciscoiosMatch15.6\(1\)t0a
ORciscoiosMatch15.6\(1\)t1
ORciscoiosMatch15.6\(2\)t1
ORciscoiosMatch15.6\(1\)t2
ORciscoiosMatch15.6\(2\)t0a
ORciscoiosMatch15.6\(2\)t2
ORciscoiosMatch15.6\(1\)t3
ORciscoiosMatch15.6\(2\)t3
ORciscoiosMatch15.3\(3\)jc6
ORciscoiosMatch15.3\(3\)jc8
ORciscoiosMatch15.3\(3\)jc9
ORciscoiosMatch15.3\(3\)jc14
ORciscoiosMatch15.3\(1\)sy
ORciscoiosMatch15.3\(0\)sy
ORciscoiosMatch15.3\(1\)sy1
ORciscoiosMatch15.3\(1\)sy2
ORciscoiosMatch15.6\(2\)sp
ORciscoiosMatch15.6\(2\)sp1
ORciscoiosMatch15.6\(2\)sp2
ORciscoiosMatch15.6\(2\)sp3
ORciscoiosMatch15.6\(2\)sp4
ORciscoiosMatch15.6\(1\)sn
ORciscoiosMatch15.6\(1\)sn1
ORciscoiosMatch15.6\(2\)sn
ORciscoiosMatch15.6\(1\)sn2
ORciscoiosMatch15.6\(1\)sn3
ORciscoiosMatch15.6\(3\)sn
ORciscoiosMatch15.6\(4\)sn
ORciscoiosMatch15.6\(5\)sn
ORciscoiosMatch15.6\(6\)sn
ORciscoiosMatch15.6\(7\)sn
ORciscoiosMatch15.6\(7\)sn1
ORciscoiosMatch15.6\(7\)sn2
ORciscoiosMatch15.6\(7\)sn3
ORciscoiosMatch15.3\(3\)jd3
ORciscoiosMatch15.3\(3\)jd4
ORciscoiosMatch15.3\(3\)jd5
ORciscoiosMatch15.3\(3\)jd6
ORciscoiosMatch15.3\(3\)jd7
ORciscoiosMatch15.3\(3\)jd8
ORciscoiosMatch15.3\(3\)jd9
ORciscoiosMatch15.3\(3\)jd11
ORciscoiosMatch15.3\(3\)jd12
ORciscoiosMatch15.3\(3\)jd13
ORciscoiosMatch15.3\(3\)jd14
ORciscoiosMatch15.3\(3\)jd15
ORciscoiosMatch15.6\(3\)m
ORciscoiosMatch15.6\(3\)m1
ORciscoiosMatch15.6\(3\)m0a
ORciscoiosMatch15.6\(3\)m1a
ORciscoiosMatch15.6\(3\)m1b
ORciscoiosMatch15.6\(3\)m2
ORciscoiosMatch15.6\(3\)m2a
ORciscoiosMatch15.6\(3\)m3
ORciscoiosMatch15.6\(3\)m3a
ORciscoiosMatch15.6\(3\)m4
ORciscoiosMatch15.2\(4\)ec1
ORciscoiosMatch15.2\(4\)ec2
ORciscoiosMatch15.4\(1\)sy
ORciscoiosMatch15.4\(1\)sy1
ORciscoiosMatch15.4\(1\)sy2
ORciscoiosMatch15.4\(1\)sy3
ORciscoiosMatch15.4\(1\)sy4
ORciscoiosMatch15.3\(3\)je
ORciscoiosMatch15.3\(3\)jda15
ORciscoiosMatch15.5\(1\)sy
ORciscoiosMatch15.5\(1\)sy1
ORciscoiosMatch15.3\(3\)jf
ORciscoiosMatch15.3\(3\)jf1
ORciscoiosMatch15.3\(3\)jf2
ORciscoiosMatch15.3\(3\)jf4
ORciscoiosMatch15.3\(3\)jf5
ORciscoiosMatch15.3\(3\)jf6
ORciscoiosMatch15.3\(3\)jf7
ORciscoiosMatch15.7\(3\)m
ORciscoiosMatch15.7\(3\)m1
ORciscoiosMatch15.7\(3\)m0a
ORciscoiosMatch15.3\(3\)jg
ORciscoiosMatch15.3\(3\)jg1
ORciscoiosMatch15.3\(3\)jh
ORciscoiosMatch15.3\(3\)jh1
ORciscoiosMatch12.2\(6\)i1
ORciscocisco_ios_xe_softwareMatch3.16.0s
ORciscocisco_ios_xe_softwareMatch3.16.1s
ORciscocisco_ios_xe_softwareMatch3.16.0as
ORciscocisco_ios_xe_softwareMatch3.16.1as
ORciscocisco_ios_xe_softwareMatch3.16.2s
ORciscocisco_ios_xe_softwareMatch3.16.2as
ORciscocisco_ios_xe_softwareMatch3.16.0bs
ORciscocisco_ios_xe_softwareMatch3.16.0cs
ORciscocisco_ios_xe_softwareMatch3.16.3s
ORciscocisco_ios_xe_softwareMatch3.16.2bs
ORciscocisco_ios_xe_softwareMatch3.16.3as
ORciscocisco_ios_xe_softwareMatch3.16.4s
ORciscocisco_ios_xe_softwareMatch3.16.4as
ORciscocisco_ios_xe_softwareMatch3.16.4bs
ORciscocisco_ios_xe_softwareMatch3.16.4gs
ORciscocisco_ios_xe_softwareMatch3.16.5s
ORciscocisco_ios_xe_softwareMatch3.16.4cs
ORciscocisco_ios_xe_softwareMatch3.16.4ds
ORciscocisco_ios_xe_softwareMatch3.16.4es
ORciscocisco_ios_xe_softwareMatch3.16.6s
ORciscocisco_ios_xe_softwareMatch3.16.5as
ORciscocisco_ios_xe_softwareMatch3.16.5bs
ORciscocisco_ios_xe_softwareMatch3.16.7s
ORciscocisco_ios_xe_softwareMatch3.16.6bs
ORciscocisco_ios_xe_softwareMatch3.16.7as
ORciscocisco_ios_xe_softwareMatch3.16.7bs
ORciscocisco_ios_xe_softwareMatch3.17.0s
ORciscocisco_ios_xe_softwareMatch3.17.1s
ORciscocisco_ios_xe_softwareMatch3.17.2s
ORciscocisco_ios_xe_softwareMatch3.17.1as
ORciscocisco_ios_xe_softwareMatch3.17.3s
ORciscocisco_ios_xe_softwareMatch3.17.4s
ORciscocisco_ios_xe_softwareMatch16.1.1
ORciscocisco_ios_xe_softwareMatch16.1.2
ORciscocisco_ios_xe_softwareMatch16.1.3
ORciscocisco_ios_xe_softwareMatch16.2.1
ORciscocisco_ios_xe_softwareMatch16.2.2
ORciscocisco_ios_xe_softwareMatch3.8.0e
ORciscocisco_ios_xe_softwareMatch3.8.1e
ORciscocisco_ios_xe_softwareMatch3.8.2e
ORciscocisco_ios_xe_softwareMatch3.8.3e
ORciscocisco_ios_xe_softwareMatch3.8.4e
ORciscocisco_ios_xe_softwareMatch3.8.5e
ORciscocisco_ios_xe_softwareMatch3.8.5ae
ORciscocisco_ios_xe_softwareMatch3.8.6e
ORciscocisco_ios_xe_softwareMatch16.3.1
ORciscocisco_ios_xe_softwareMatch16.3.2
ORciscocisco_ios_xe_softwareMatch16.3.3
ORciscocisco_ios_xe_softwareMatch16.3.1a
ORciscocisco_ios_xe_softwareMatch16.3.4
ORciscocisco_ios_xe_softwareMatch16.3.5
ORciscocisco_ios_xe_softwareMatch16.3.5b
ORciscocisco_ios_xe_softwareMatch16.3.6
ORciscocisco_ios_xe_softwareMatch16.4.1
ORciscocisco_ios_xe_softwareMatch16.4.2
ORciscocisco_ios_xe_softwareMatch16.4.3
ORciscocisco_ios_xe_softwareMatch16.5.1
ORciscocisco_ios_xe_softwareMatch16.5.1a
ORciscocisco_ios_xe_softwareMatch16.5.1b
ORciscocisco_ios_xe_softwareMatch16.5.2
ORciscocisco_ios_xe_softwareMatch16.5.3
ORciscocisco_ios_xe_softwareMatch3.18.0as
ORciscocisco_ios_xe_softwareMatch3.18.0s
ORciscocisco_ios_xe_softwareMatch3.18.1s
ORciscocisco_ios_xe_softwareMatch3.18.2s
ORciscocisco_ios_xe_softwareMatch3.18.3s
ORciscocisco_ios_xe_softwareMatch3.18.4s
ORciscocisco_ios_xe_softwareMatch3.18.0sp
ORciscocisco_ios_xe_softwareMatch3.18.1sp
ORciscocisco_ios_xe_softwareMatch3.18.1asp
ORciscocisco_ios_xe_softwareMatch3.18.1gsp
ORciscocisco_ios_xe_softwareMatch3.18.1bsp
ORciscocisco_ios_xe_softwareMatch3.18.1csp
ORciscocisco_ios_xe_softwareMatch3.18.2sp
ORciscocisco_ios_xe_softwareMatch3.18.1hsp
ORciscocisco_ios_xe_softwareMatch3.18.2asp
ORciscocisco_ios_xe_softwareMatch3.18.1isp
ORciscocisco_ios_xe_softwareMatch3.18.3sp
ORciscocisco_ios_xe_softwareMatch3.18.4sp
ORciscocisco_ios_xe_softwareMatch3.18.3asp
ORciscocisco_ios_xe_softwareMatch3.18.3bsp
ORciscocisco_ios_xe_softwareMatch3.9.0e
ORciscocisco_ios_xe_softwareMatch3.9.1e
ORciscocisco_ios_xe_softwareMatch3.9.2e
ORciscocisco_ios_xe_softwareMatch3.9.2be
ORciscocisco_ios_xe_softwareMatch16.6.1
ORciscocisco_ios_xe_softwareMatch16.6.2
ORciscocisco_ios_xe_softwareMatch16.6.3
ORciscocisco_ios_xe_softwareMatch16.7.1
ORciscocisco_ios_xe_softwareMatch16.7.1a
ORciscocisco_ios_xe_softwareMatch16.7.1b
ORciscocisco_ios_xe_softwareMatch16.8.1
ORciscocisco_ios_xe_softwareMatch16.8.1a
ORciscocisco_ios_xe_softwareMatch16.8.1b
ORciscocisco_ios_xe_softwareMatch16.8.1s
ORciscocisco_ios_xe_softwareMatch16.8.1c
ORciscocisco_ios_xe_softwareMatch3.10.0e
ORciscocisco_ios_xe_softwareMatch3.10.1e
ORciscocisco_ios_xe_softwareMatch3.10.0ce
ORciscocisco_ios_xe_softwareMatch3.10.1ae
ORciscocisco_ios_xe_softwareMatch3.10.1se
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios | 15.2e | cpe:2.3:o:cisco:ios:15.2e:*:*:*:*:*:*:* |
| cisco | ios | 15.2ex | cpe:2.3:o:cisco:ios:15.2ex:*:*:*:*:*:*:* |
| cisco | ios | 15.5s | cpe:2.3:o:cisco:ios:15.5s:*:*:*:*:*:*:* |
| cisco | ios | 15.2ea | cpe:2.3:o:cisco:ios:15.2ea:*:*:*:*:*:*:* |
| cisco | ios | 15.5m | cpe:2.3:o:cisco:ios:15.5m:*:*:*:*:*:*:* |
| cisco | ios | 15.5sn | cpe:2.3:o:cisco:ios:15.5sn:*:*:*:*:*:*:* |
| cisco | ios | 15.6s | cpe:2.3:o:cisco:ios:15.6s:*:*:*:*:*:*:* |
| cisco | ios | 15.6t | cpe:2.3:o:cisco:ios:15.6t:*:*:*:*:*:*:* |
| cisco | ios | 15.3jc | cpe:2.3:o:cisco:ios:15.3jc:*:*:*:*:*:*:* |
| cisco | ios | 15.3sy | cpe:2.3:o:cisco:ios:15.3sy:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2018-15377
2018-10-05 14:29:06
prion
prion
Input validation
2018-10-05 14:29:00
nessus
nessus
cve
cve
CVE-2018-15377
2018-10-05 14:29:06
ics
ics
Rockwell Automation Stratix 5400/5410/5700 and ArmorStratix 5700
2019-04-05 12:00:00
cvelist
cvelist