TI-2018-00106 Aliases CVE-2018-0132 GHSA-c9gw-ww29-cmh7

Memory corruption in Cisco IOS XR

MEDIUM 48CWE-119Published 2018-02-08 · Updated 2024-12-02

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base (RIB) and the FIB, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect processing of extremely long routing updates. An attacker could exploit this vulnerability by sending a large routing update. A successful exploit could allow the attacker to trigger inconsistency between the FIB and the RIB, resulting in a DoS condition. Cisco Bug IDs: CSCus84718.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.02297 83rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Cisco IOS XR	Cisco IOS XR	—	No fix listed	CNA

Cisco IOS XR Vendor— Affected Cisco IOS XR Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:cisco:carrier_routing_system:5.3.0.rout:::::::*	5.3.0.rout	Vulnerable	Cisco

cpe:2.3:a:cisco:carrier_routing_system:5.3.0.rout:*:*:*:*:*:*:* Versions 5.3.0.rout Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-0132
2026-10-03 Alias added: GHSA-c9gw-ww29-cmh7

References

Advisory 1

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-iosxr

TI-2015-00573 Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System (NCS) 6000 devices and 5.1.3… CVSS 2.0HIGH 7.1
TI-2019-01538 Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability CVSS 3.1HIGH 7.4
TI-2019-01531 Cisco IOS XR Software Intermediate System to Intermediate System Denial of Service Vulnerability CVSS 3.1HIGH 7.4
TI-2012-01192 Cisco Carrier Routing System (CRS) 3.9, 4.0, and 4.1 allows remote attackers to bypass… CVSS 3.1MEDIUM 5.8
TI-2013-00961 Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service… CVSS 2.0MEDIUM 5.0
TI-2011-02911 Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service… CVSS 2.0MEDIUM 5.0

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences