{"id":"CVE-2018-15428","published":"2018-10-05T14:00:00Z","modified":"2024-11-26T14:27:41Z","title":"Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability","vendor":"Cisco","product":"Cisco IOS XR Software","tier":"tail","description":{"text":"A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP update messages. An attacker could exploit this vulnerability by sending BGP update messages that include a specific, malformed attribute to be processed by an affected system. A successful exploit could allow the attacker to cause the BGP process to restart unexpectedly, resulting in a DoS condition. The Cisco implementation of BGP accepts incoming BGP traffic only from explicitly defined peers. To exploit this vulnerability, the malicious BGP update message would need to come from a configured, valid BGP peer, or would need to be injected by the attacker into the victim's BGP network on an existing, valid TCP connection to a BGP peer.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01954,"percentile":0.80182,"provenance":"source"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"}],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-iosxr-dos","tags":["vendor-advisory","x_refsource_CISCO"]},{"url":"http://www.securitytracker.com/id/1041790","tags":["vdb-entry","x_refsource_SECTRACK"]}],"priority":{"score":16.0,"factors":[{"name":"EPSS percentile","points":16.04}]},"vendorSlug":"cisco","euvd":{"id":"EUVD-2018-7306","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-cisco-ios-xr-cwe-20"}}