Cisco IOS Software Link Layer Discovery Protocol Processing Code Denial of Service Vulnerability

A vulnerability in the Link Layer Discovery Protocol (LLDP) packet processing code of Cisco IOS Software could allow an unauthenticated, adjacent attacker to cause an affected device to crash.

The vulnerability is due to improper handling of crafted LLDP packets. An attacker could exploit this vulnerability by sending a specially crafted LLDP packet. An exploit could allow the attacker to cause a Denial of Service (DoS) condition on an affected platform.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link: http://ift.tt/1S9QMIF A vulnerability in the Link Layer Discovery Protocol (LLDP) packet processing code of Cisco IOS Software could allow an unauthenticated, adjacent attacker to cause an affected device to crash.

The vulnerability is due to improper handling of crafted LLDP packets. An attacker could exploit this vulnerability by sending a specially crafted LLDP packet. An exploit could allow the attacker to cause a Denial of Service (DoS) condition on an affected platform.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

This advisory is available at the following link: http://ift.tt/1S9QMIF
Security Impact Rating: Medium
CVE: CVE-2016-1424

from Cisco Security Advisory http://ift.tt/1S9QMIF