CVE-2016-6392

N/A

Published: October 5, 2016 at 05:00 PM UTC

Updated: June 17, 2026 at 12:50 AM UTC

2 products affected across 1 vendorIOSIOS Xe

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.1 through 3.9 allow remote attackers to cause a denial of service (device restart) via a crafted IPv4 Multicast Source Discovery Protocol (MSDP) Source-Active (SA) message, aka Bug ID CSCud36767.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS · Cisconpm

95%

12.2(33)cx 12.2(33)cy 12.2(33)cy1 12.2(33)ira 12.2(33)irb 12.2(33)irc 12.2(33)ird 12.2(33)ire 12.2(33)ire1 12.2(33)ire2 12.2(33)irf 12.2(33)irg 12.2(33)irg1 12.2(33)irh 12.2(33)irh1 12.2(33)iri 12.2(33)mra 12.2(33)mrb 12.2(33)mrb1 12.2(33)mrb2 12.2(33)mrb3 12.2(33)mrb4 12.2(33)mrb5 12.2(33)mrb6 12.2(33)sb 12.2(33)sb1 12.2(33)sb10 12.2(33)sb11 12.2(33)sb12 12.2(33)sb13 12.2(33)sb14 12.2(33)sb15 12.2(33)sb16 12.2(33)sb17 12.2(33)sb2 12.2(33)sb3 12.2(33)sb4 12.2(33)sb5 12.2(33)sb6 12.2(33)sb7 12.2(33)sb8 12.2(33)sb9 12.2(33)sca 12.2(33)sca1 12.2(33)sca2 12.2(33)scb 12.2(33)scb1 12.2(33)scb10 12.2(33)scb11 12.2(33)scb2 12.2(33)scb3 12.2(33)scb4 12.2(33)scb5 12.2(33)scb6 12.2(33)scb7 12.2(33)scb8 12.2(33)scb9 12.2(33)scc 12.2(33)scc1 12.2(33)scc2 12.2(33)scc3 12.2(33)scc4 12.2(33)scc5 12.2(33)scc6 12.2(33)scc7 12.2(33)scd 12.2(33)scd1 12.2(33)scd2 12.2(33)scd3 12.2(33)scd4 12.2(33)scd5 12.2(33)scd6 12.2(33)scd7 12.2(33)scd8 12.2(33)sce 12.2(33)sce1 12.2(33)sce2 12.2(33)sce3 12.2(33)sce4 12.2(33)sce5 12.2(33)sce6 12.2(33)scf 12.2(33)scf1 12.2(33)scf2 12.2(33)scf3 12.2(33)scf4 12.2(33)scf5 12.2(33)scg 12.2(33)scg1 12.2(33)scg2 12.2(33)scg3 12.2(33)scg4 12.2(33)scg5 12.2(33)scg6 12.2(33)scg7 12.2(33)sch 12.2(33)sch0a 12.2(33)sch1 12.2(33)sch2 12.2(33)sch2a 12.2(33)sch3 12.2(33)sch4 12.2(33)sch5 12.2(33)sch6 12.2(33)sci 12.2(33)sci1 12.2(33)sci1a 12.2(33)sci2 12.2(33)sci2a 12.2(33)sci3 12.2(33)scj 12.2(33)srb 12.2(33)srb1 12.2(33)srb2 12.2(33)srb3 12.2(33)srb4 12.2(33)srb5 12.2(33)srb5a 12.2(33)srb6 12.2(33)srb7 12.2(33)src 12.2(33)src1 12.2(33)src2 12.2(33)src3 12.2(33)src4 12.2(33)src5 12.2(33)src6 12.2(33)srd 12.2(33)srd1 12.2(33)srd2 12.2(33)srd2a 12.2(33)srd3 12.2(33)srd4 12.2(33)srd5 12.2(33)srd6 12.2(33)srd7 12.2(33)srd8 12.2(33)sre 12.2(33)sre0a 12.2(33)sre1 12.2(33)sre10 12.2(33)sre11 12.2(33)sre12 12.2(33)sre13 12.2(33)sre14 12.2(33)sre2 12.2(33)sre3 12.2(33)sre4 12.2(33)sre5 12.2(33)sre6 12.2(33)sre7 12.2(33)sre7a 12.2(33)sre8 12.2(33)sre9 12.2(33)sre9a 12.2(33)xn1 12.2(58)ex 12.2(58)ey 12.2(58)ey1 12.2(58)ey2 12.2(58)ez 12.2(58)se 12.2(58)se1 12.2(58)se2 12.2(60)ez 12.2(60)ez1 12.2(60)ez2 12.2(60)ez3 12.2(60)ez4 12.2(60)ez5 12.2(60)ez6 12.2(60)ez7 12.2(60)ez8 12.2(60)ez9 15.0(1)ex 15.0(1)m 15.0(1)m1 15.0(1)m10 15.0(1)m2 15.0(1)m3 15.0(1)m4 15.0(1)m5 15.0(1)m6 15.0(1)m7 15.0(1)m8 15.0(1)m9 15.0(1)mr 15.0(1)s 15.0(1)s1 15.0(1)s2 15.0(1)s3a 15.0(1)s4 15.0(1)s4a 15.0(1)s5 15.0(1)s6 15.0(1)se 15.0(1)se1 15.0(1)se2 15.0(1)se3 15.0(1)sy 15.0(1)sy1 15.0(1)sy10 15.0(1)sy2 15.0(1)sy3 15.0(1)sy4 15.0(1)sy5 15.0(1)sy6 15.0(1)sy7 15.0(1)sy7a 15.0(1)sy8 15.0(1)sy9 15.0(1)xa 15.0(1)xa1 15.0(1)xa2 15.0(1)xa3 15.0(1)xa4 15.0(1)xa5 15.0(2)ed 15.0(2)ed1 15.0(2)eh 15.0(2)ej 15.0(2)ej1 15.0(2)ek 15.0(2)ek1 15.0(2)ex 15.0(2)ex1 15.0(2)ex3 15.0(2)ex4 15.0(2)ex5 15.0(2)ey 15.0(2)ey1 15.0(2)ey2 15.0(2)ey3 15.0(2)ez 15.0(2)mr 15.0(2)se 15.0(2)se1 15.0(2)se2 15.0(2)se3 15.0(2)se4 15.0(2)se5 15.0(2)se6 15.0(2)se7 15.0(2)se9 15.0(2a)ex5 15.1(1)mr 15.1(1)mr1 15.1(1)mr2 15.1(1)mr3 15.1(1)mr4 15.1(1)s 15.1(1)s1 15.1(1)s2 15.1(1)sg 15.1(1)sg1 15.1(1)sg2 15.1(1)sy 15.1(1)sy1 15.1(1)sy2 15.1(1)sy3 15.1(1)sy4 15.1(1)sy5 15.1(1)sy6 15.1(1)t 15.1(1)t1 15.1(1)t2 15.1(1)t3 15.1(1)t4 15.1(1)t5 15.1(1)xb 15.1(2)ey 15.1(2)ey1a 15.1(2)ey2 15.1(2)ey2a 15.1(2)ey3 15.1(2)ey4 15.1(2)gc 15.1(2)gc1 15.1(2)gc2 15.1(2)s 15.1(2)s1 15.1(2)s2 15.1(2)sg 15.1(2)sg1 15.1(2)sg2 15.1(2)sg3 15.1(2)sg4 15.1(2)sg5 15.1(2)sg6 15.1(2)sg7 15.1(2)sng 15.1(2)snh 15.1(2)sni 15.1(2)sni1 15.1(2)sy 15.1(2)sy1 15.1(2)sy2 15.1(2)sy3 15.1(2)sy4 15.1(2)sy4a 15.1(2)sy5 15.1(2)sy6 15.1(2)sy7 15.1(2)t 15.1(2)t0a 15.1(2)t1 15.1(2)t2 15.1(2)t2a 15.1(2)t3 15.1(2)t4 15.1(2)t5 15.1(3)mr 15.1(3)mra 15.1(3)mra1 15.1(3)mra2 15.1(3)s 15.1(3)s0a 15.1(3)s1 15.1(3)s2 15.1(3)s3 15.1(3)s4 15.1(3)s5 15.1(3)s5a 15.1(3)s6 15.1(3)t 15.1(3)t1 15.1(3)t2 15.1(3)t3 15.1(3)t4 15.1(4)gc 15.1(4)gc1 15.1(4)gc2 15.1(4)m 15.1(4)m1 15.1(4)m10 15.1(4)m2 15.1(4)m3 15.1(4)m3a 15.1(4)m4 15.1(4)m5 15.1(4)m6 15.1(4)m7 15.1(4)m8 15.1(4)m9 15.2(1)e 15.2(1)e1 15.2(1)e2 15.2(1)e3 15.2(1)ey 15.2(1)gc 15.2(1)gc1 15.2(1)gc2 15.2(1)s 15.2(1)s1 15.2(1)s2 15.2(1)t 15.2(1)t1 15.2(1)t2 15.2(1)t3 15.2(1)t3a 15.2(1)t4 15.2(2)gc 15.2(2)s 15.2(2)s0a 15.2(2)s0c 15.2(2)s1 15.2(2)s2 15.2(2)sng 15.2(2)snh1 15.2(2)sni 15.2(2)t 15.2(2)t1 15.2(2)t2 15.2(2)t3 15.2(2)t4 15.2(3)gc 15.2(3)gc1 15.2(3)t 15.2(3)t1 15.2(3)t2 15.2(3)t3 15.2(3)t4 15.2(4)gc 15.2(4)gc1 15.2(4)gc2 15.2(4)gc3 15.2(4)m 15.2(4)m1 15.2(4)m10 15.2(4)m2 15.2(4)m3 15.2(4)m4 15.2(4)m5 15.2(4)m6 15.2(4)m6a 15.2(4)m7 15.2(4)m8 15.2(4)m9 15.2(4)s 15.2(4)s1 15.2(4)s2 15.2(4)s3 15.2(4)s3a 15.2(4)s4 15.2(4)s4a 15.2(4)s5 15.2(4)s6 15.2(4)s7 15.3(1)s 15.3(1)s1 15.3(1)s2 15.3(1)t 15.3(1)t1 15.3(1)t2 15.3(1)t3 15.3(1)t4 15.3(2)s 15.3(2)s0a 15.3(2)s1 15.3(2)s2 15.3(2)t 15.3(2)t1 15.3(2)t2 15.3(2)t3 15.3(2)t4 15.3(3)m 15.3(3)m1 15.3(3)m2 15.3(3)m3 15.3(3)m4 15.3(3)m5 15.3(3)m6 15.3(3)m7

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-msdp

References (3)

Vendor Advisoryx_refsource_CISCO

Source: [email protected]

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-msdp

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/93211

VDB Entryx_refsource_SECTRACKThird Party Advisory

Source: [email protected]

http://www.securitytracker.com/id/1036914

CVSS

7.8HIGH[email protected]

Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-399

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card