Read the docs
TI-2017-04484 Aliases CVE-2017-6729GHSA-65jx-wrpg-m8qj

A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the…

Priority LOW 37Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. More Information: CSCvc44968. Known Affected Releases: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Known Fixed Releases: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.0.

Why it matters now

EPSS 0.02297 83rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco StarOSCisco StarOS—No fix listedCNA
  • Cisco StarOS Vendor— Affected Cisco StarOS Fixed in — No fix listed CNA

CPE configurations NVD · 53

CPEVersionsRoleVendor
cpe:2.3:a:cisco:asr_5000_software:16.4.1:*:*:*:*:*:*:*16.4.1VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:16.5.0:*:*:*:*:*:*:*16.5.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:16.5.2:*:*:*:*:*:*:*16.5.2VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:17.2.0:*:*:*:*:*:*:*17.2.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:17.2.0.59184:*:*:*:*:*:*:*17.2.0.59184VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:17.3.0:*:*:*:*:*:*:*17.3.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:17.3.1:*:*:*:*:*:*:*17.3.1VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:17.3.9.62033:*:*:*:*:*:*:*17.3.9.62033VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:17.3_base:*:*:*:*:*:*:*17.3_baseVulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:17.7.0:*:*:*:*:*:*:*17.7.0VulnerableCisco
  • cpe:2.3:a:cisco:asr_5000_software:16.4.1:*:*:*:*:*:*:* Versions 16.4.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:16.5.0:*:*:*:*:*:*:* Versions 16.5.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:16.5.2:*:*:*:*:*:*:* Versions 16.5.2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:17.2.0:*:*:*:*:*:*:* Versions 17.2.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:17.2.0.59184:*:*:*:*:*:*:* Versions 17.2.0.59184 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:17.3.0:*:*:*:*:*:*:* Versions 17.3.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:17.3.1:*:*:*:*:*:*:* Versions 17.3.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:17.3.9.62033:*:*:*:*:*:*:* Versions 17.3.9.62033 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:17.3_base:*:*:*:*:*:*:* Versions 17.3_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:17.7.0:*:*:*:*:*:*:* Versions 17.7.0 Vulnerable ·Cisco
Show 43 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:asr_5000_software:17.7.5:*:*:*:*:*:*:*17.7.5VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.0.0:*:*:*:*:*:*:*18.0.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.0.0.57828:*:*:*:*:*:*:*18.0.0.57828VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.0.0.59167:*:*:*:*:*:*:*18.0.0.59167VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.0.0.59211:*:*:*:*:*:*:*18.0.0.59211VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.0.l0.59219:*:*:*:*:*:*:*18.0.l0.59219VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.1.0:*:*:*:*:*:*:*18.1.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.1.0.59776:*:*:*:*:*:*:*18.1.0.59776VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.1.0.59780:*:*:*:*:*:*:*18.1.0.59780VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.1_base:*:*:*:*:*:*:*18.1_baseVulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.3.0:*:*:*:*:*:*:*18.3.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.3_base:*:*:*:*:*:*:*18.3_baseVulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:18.4.0:*:*:*:*:*:*:*18.4.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:19.0.1:*:*:*:*:*:*:*19.0.1VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60737:*:*:*:*:*:*:*19.0.m0.60737VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60828:*:*:*:*:*:*:*19.0.m0.60828VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:19.0.m0.61045:*:*:*:*:*:*:*19.0.m0.61045VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:19.1.0:*:*:*:*:*:*:*19.1.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:19.1.0.61559:*:*:*:*:*:*:*19.1.0.61559VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:19.2.0:*:*:*:*:*:*:*19.2.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:19.3.0:*:*:*:*:*:*:*19.3.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:19.6.3:*:*:*:*:*:*:*19.6.3VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:19.6_base:*:*:*:*:*:*:*19.6_baseVulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.0.0:*:*:*:*:*:*:*20.0.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.0.1.0:*:*:*:*:*:*:*20.0.1.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.0.1.a0:*:*:*:*:*:*:*20.0.1.a0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.0.1.v0:*:*:*:*:*:*:*20.0.1.v0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.0.2.3:*:*:*:*:*:*:*20.0.2.3VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.0.2.3.65026:*:*:*:*:*:*:*20.0.2.3.65026VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.0.2.v1:*:*:*:*:*:*:*20.0.2.v1VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.0.m0.62842:*:*:*:*:*:*:*20.0.m0.62842VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.0.m0.63229:*:*:*:*:*:*:*20.0.m0.63229VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.0.v0:*:*:*:*:*:*:*20.0.v0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.1.v2:*:*:*:*:*:*:*20.1.v2VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.1_base:*:*:*:*:*:*:*20.1_baseVulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.2.12:*:*:*:*:*:*:*20.2.12VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:20.2_base:*:*:*:*:*:*:*20.2_baseVulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:21.0.0:*:*:*:*:*:*:*21.0.0VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:21.0.v1:*:*:*:*:*:*:*21.0.v1VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:21.0_base:*:*:*:*:*:*:*21.0_baseVulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:21.0_m0.64246:*:*:*:*:*:*:*21.0_m0.64246VulnerableCisco
cpe:2.3:a:cisco:asr_5000_software:21.0_m0.64702:*:*:*:*:*:*:*21.0_m0.64702VulnerableCisco
cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:a:cisco:asr_5000_software:17.7.5:*:*:*:*:*:*:* Versions 17.7.5 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.0.0:*:*:*:*:*:*:* Versions 18.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.0.0.57828:*:*:*:*:*:*:* Versions 18.0.0.57828 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.0.0.59167:*:*:*:*:*:*:* Versions 18.0.0.59167 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.0.0.59211:*:*:*:*:*:*:* Versions 18.0.0.59211 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.0.l0.59219:*:*:*:*:*:*:* Versions 18.0.l0.59219 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.1.0:*:*:*:*:*:*:* Versions 18.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.1.0.59776:*:*:*:*:*:*:* Versions 18.1.0.59776 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.1.0.59780:*:*:*:*:*:*:* Versions 18.1.0.59780 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.1_base:*:*:*:*:*:*:* Versions 18.1_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.3.0:*:*:*:*:*:*:* Versions 18.3.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.3_base:*:*:*:*:*:*:* Versions 18.3_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:18.4.0:*:*:*:*:*:*:* Versions 18.4.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:19.0.1:*:*:*:*:*:*:* Versions 19.0.1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60737:*:*:*:*:*:*:* Versions 19.0.m0.60737 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60828:*:*:*:*:*:*:* Versions 19.0.m0.60828 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:19.0.m0.61045:*:*:*:*:*:*:* Versions 19.0.m0.61045 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:19.1.0:*:*:*:*:*:*:* Versions 19.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:19.1.0.61559:*:*:*:*:*:*:* Versions 19.1.0.61559 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:19.2.0:*:*:*:*:*:*:* Versions 19.2.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:19.3.0:*:*:*:*:*:*:* Versions 19.3.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:19.6.3:*:*:*:*:*:*:* Versions 19.6.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:19.6_base:*:*:*:*:*:*:* Versions 19.6_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.0.0:*:*:*:*:*:*:* Versions 20.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.0.1.0:*:*:*:*:*:*:* Versions 20.0.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.0.1.a0:*:*:*:*:*:*:* Versions 20.0.1.a0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.0.1.v0:*:*:*:*:*:*:* Versions 20.0.1.v0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.0.2.3:*:*:*:*:*:*:* Versions 20.0.2.3 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.0.2.3.65026:*:*:*:*:*:*:* Versions 20.0.2.3.65026 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.0.2.v1:*:*:*:*:*:*:* Versions 20.0.2.v1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.0.m0.62842:*:*:*:*:*:*:* Versions 20.0.m0.62842 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.0.m0.63229:*:*:*:*:*:*:* Versions 20.0.m0.63229 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.0.v0:*:*:*:*:*:*:* Versions 20.0.v0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.1.v2:*:*:*:*:*:*:* Versions 20.1.v2 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.1_base:*:*:*:*:*:*:* Versions 20.1_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.2.12:*:*:*:*:*:*:* Versions 20.2.12 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:20.2_base:*:*:*:*:*:*:* Versions 20.2_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:21.0.0:*:*:*:*:*:*:* Versions 21.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:21.0.v1:*:*:*:*:*:*:* Versions 21.0.v1 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:21.0_base:*:*:*:*:*:*:* Versions 21.0_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:21.0_m0.64246:*:*:*:*:*:*:* Versions 21.0_m0.64246 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:asr_5000_software:21.0_m0.64702:*:*:*:*:*:*:* Versions 21.0_m0.64702 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-6729
  2. 2026-10-03 Alias added: GHSA-65jx-wrpg-m8qj

References

Advisory 1

  • TI-2016-05537 Resource management flaw in Cisco StarOS 18.x through 21.x CVSS 3.0HIGH 7.5
  • TI-2016-01324 The General Packet Radio Switching Tunneling Protocol 1 (aka GTPv1) implementation on… CVSS 3.0HIGH 7.5
  • TI-2016-01340 Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make… CVSS 3.0MEDIUM 6.5
  • TI-2017-04527 Improper input validation in Cisco StarOS for ASR 5000 Series Aggregated Services Routers CVSS 3.0MEDIUM 6.7
  • TI-2015-05325 The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000… CVSS 2.0MEDIUM 5.0
  • TI-2015-05321 Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote… CVSS 2.0MEDIUM 5.0
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences