This security advisory describes one medium risk vulnerability.
1) State Issues
CWE-371 – State Issues
The vulnerability allows a remote attacker to perofrm a denial of service (DoS) attack.
The vulnerability exists due to the IP Service Level Agreement (SLA) responder feature could consume a port that could be used by another feature. A remote attacker can send specific IP SLA control packets and cause an in-use port to be consumed by the IP SLA responder, resulting in a denial of service condition.
Install updates from vendor’s website.
Vulnerable software versions
Cisco IOS XE:
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.