CVE-2016-6386
N/A
Published: October 5, 2016 at 05:00 PM UTC
Updated: June 17, 2026 at 12:50 AM UTC
6 products affected across 1 vendorIOS XeIOS Xe 3.3sgIOS Xe 3.4sg
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
3.1.0s3.1.0sg3.1.1s3.1.1sg3.1.2s3.1.3as3.1.4as3.1.4s3.10.0s3.10.1s3.10.1xbs3.10.2s3.10.3s3.10.4s3.10.5s3.10.6s3.10.7s3.11.0s3.11.1s3.11.2s3.11.3s3.11.4s3.12.0as3.12.0s3.12.1s3.12.2s3.12.3s3.12.4s3.13.0as3.13.0s3.13.1s3.13.2as3.13.2s3.13.3s3.13.4s3.14.0s3.14.1s3.14.2s3.14.3s3.15.0s3.15.1cs3.15.1s3.15.2s3.16.0cs3.16.0s3.16.1as3.16.1s3.17.0s3.2.0se3.2.1s3.2.1se3.2.2s3.2.2se3.2.3se3.3.0s3.3.0se3.3.0sq3.3.1s3.3.1se3.3.1sq3.3.2s3.3.2se3.3.3se3.3.4se3.3.5se3.4.0as3.4.0s3.4.0sq3.4.1s3.4.1sq3.4.2s3.4.3s3.4.4s3.4.5s3.4.6s3.5.0e3.5.0s3.5.0sq3.5.1e3.5.1s3.5.1sq3.5.2e3.5.2s3.5.2sq3.5.3e3.5.3sq3.6.0e3.6.0s3.6.1e3.6.1s3.6.2ae3.6.2e3.6.2s3.6.3e3.6.4e3.7.0s3.7.1e3.7.1s3.7.2e3.7.2s3.7.2ts3.7.3e3.7.3s3.7.4as3.7.4s3.7.5s3.7.6s3.8.0e3.8.0ex3.8.0s3.8.1e3.8.1s3.8.2s3.9.0as3.9.0s3.9.1as3.9.1s3.9.2s
3.2.0ja
3.3.0sg3.3.1sg3.3.2sg
3.3.0xo3.3.1xo3.3.2xo
3.4.0sg3.4.1sg3.4.2sg3.4.3sg3.4.4sg3.4.5sg3.4.6sg3.4.7sg
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (3)
Vendor Advisoryx_refsource_CISCO
Source: [email protected]
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-fragQuick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card