CVE-2018-0480

MEDIUM Year: 2018
CVSS v3 Score
6.1
Medium
CVSS v2 Score
5.7
Medium
Weakness Type
CWE-362
View all →

Vulnerability Description

A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service (DoS) condition. The vulnerability is due to a race condition that occurs when the VLAN and port enter an errdisabled state, resulting in an incorrect state in the software. An attacker could exploit this vulnerability by sending frames that trigger the errdisable condition. A successful exploit could allow the attacker to cause the affected device to crash, leading to a DoS condition.

Related Vulnerabilities

CVE-2019-18567

MEDIUM
CVSS:6.1(Medium)

Bromium client version 4.0.3.2060 and prior to 4.1.7 Update 1 has an out of bound read results in race condition causing Kernel memory leaks or denial of service.

CWE-3622019

CVE-2019-3837

MEDIUM
CVSS:6.1(Medium)

It was found that the net_dma code in tcp_recvmsg() in the 2.6.32 kernel as shipped in RHEL6 is thread-unsafe. So an unprivileged multi-threaded userspace application calling recvmsg() for the same ne...

CWE-3622019

CVE-2024-35899

MEDIUM
CVSS:6.1(Medium)

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Similar to 2c9f0293280e ("netfilter: nf_tables: flush pendi...

CWE-3622024

CVE-2024-40887

MEDIUM
CVSS:6.1(Medium)

Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent...

CWE-3622024

CVE-2025-20119

MEDIUM
CVSS:6.0(Medium)

A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this...

CWE-3622025

CVE-2015-8767

MEDIUM
CVSS:6.2(Medium)

net/sctp/sm_sideeffect.c in the Linux kernel before 4.3 does not properly manage the relationship between a lock and a socket, which allows local users to cause a denial of service (deadlock) via a cr...

CWE-3622015