The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption or device reload) via a crafted DNS response, aka Bug ID CSCup90532.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 02:56
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-dns - Vendor Advisory | |
| References | () http://www.securityfocus.com/bid/93201Â - | |
| References | () http://www.securitytracker.com/id/1036914Â - | |
| References | () https://ics-cert.us-cert.gov/advisories/ICSA-16-287-04Â - | 
Information
                Published : 2016-10-05 20:59
Updated : 2025-04-12 10:46
NVD link : CVE-2016-6380
Mitre link : CVE-2016-6380
CVE.ORG link : CVE-2016-6380
JSON object : View
Products Affected
                cisco
- ios_xe
- ios
- ios_xe_3.4sg
- ios_xe_3.3xo
- ios_xe_3.2ja
- ios_xe_3.3sg
CWE
                
                    
                        
                        CWE-20
                        
            Improper Input Validation
