Cisco Redundancy Configuration Manager for Cisco StarOS Software TCP Denial of Service Vulnerability

A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software could allow an unauthenticated, remote attacker to cause the checkpoint manager process to restart upon receipt of malformed TCP data. This vulnerability is due to improper input validation of an ingress TCP packet. An attacker could exploit this vulnerability by sending crafted TCP data to the affected application. A successful exploit could allow the attacker to cause a denial of service (DoS) condition due to the checkpoint manager process restarting.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

输入验证不恰当

Cisco StarOS 输入验证错误漏洞

Cisco StarOS是美国思科（Cisco）公司的一套虚拟化操作系统。 Cisco StarOS Software 的 Cisco Redundancy Configuration Manager (RCM) 存在输入验证错误漏洞，该漏洞源于对入口 TCP 数据包的输入验证不当。攻击者可以通过向受影响的应用程序发送精心设计的 TCP 数据来利用此漏洞。

N/A

输入验证错误