CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco IOS and IOS XE DHCP Option 82 Encapsulation Heap Overflow Vulnerability (CVE-2018-0172) Analysis and Mitigation Guide
[Affected Scope] Cisco IOS and IOS XE Software with DHCP Option 82 relay functionality enabled
[Impact] Unauthenticated, remote attackers can trigger a heap overflow and force a device reload, leading to a complete Denial of Service (DoS)
[Mitigation] Apply official Cisco software updates immediately, or disable DHCP Option 82 relay features and restrict untrusted DHCP traffic
Cisco IOS and IOS XE DHCP Relay Subsystem Remote Code Execution and DoS Vulnerability (CVE-2017-12240) Security Advisory
[Affected Scope] Cisco network devices running Cisco IOS Software versions 12.2 through 15.6 or Cisco IOS XE Software with the DHCP relay subsystem enabled.
[Impact] An unauthenticated, remote attacker can execute arbitrary code with full system privileges (RCE) or trigger a system reload, causing a complete Denial of Service (DoS).
[Mitigation] Apply the official Cisco software updates immediately, or implement access control lists (ACLs) to block unauthorized DHCPv4 traffic and disable DHCP relay where not required.