CVE-2019-1869— Cisco StarOS 缓冲区错误漏洞

Cisco StarOS Denial of Service Vulnerability

A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running on virtual platforms could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The vulnerability is due to a logic error that may occur under specific traffic conditions. An attacker could exploit this vulnerability by sending a series of crafted packets to an affected device. A successful exploit could allow the attacker to prevent the targeted service interface from receiving any traffic, which would lead to a DoS condition on the affected interface. The device may have to be manually reloaded to recover from exploitation of this vulnerability.

N/A

使用未经初始化的指针

Cisco StarOS 缓冲区错误漏洞

Cisco StarOS是美国思科（Cisco）公司的一套虚拟化操作系统。Cisco Virtualized Packet Core-Single Instance（VPC-SI）是一款被部署在专用硬件平台的StarOS软件的产品化版本。Virtualized Packet Core-Distributed Instance（VPC-DI）是一套被部署在专用硬件平台的StarOS软件的产品化版本。 Cisco StarOS中的内部数据包处理功能存在缓冲区错误漏洞，该漏洞源于逻辑错误。远程攻击者可通过发送特

N/A

N/A