Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2020.3277
Cisco IOS and IOS XE Software vulnerabilities
25 September 2020
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Cisco IOS and IOS XE Software
Publisher: Cisco Systems
Operating System: Cisco
Impact/Access: Denial of Service -- Remote/Unauthenticated
Access Confidential Data -- Existing Account
Resolution: Patch/Upgrade
CVE Names: CVE-2020-3511 CVE-2020-3479 CVE-2020-3477
CVE-2020-3408
Original Bulletin:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-isdn-q931-dos-67eUZBTf
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-info-disclosure-V4BmJBNF
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-bgp-evpn-dos-LNfYJxfF
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-splitdns-SPWqpdGW
Comment: This bulletin contains four (4) Cisco Systems security advisories.
- --------------------------BEGIN INCLUDED TEXT--------------------
Cisco IOS and IOS XE Software ISDN Q.931 Denial of Service Vulnerability
Priority: High
Advisory ID: cisco-sa-iosxe-isdn-q931-dos-67eUZBTf
First Published: 2020 September 24 16:00 GMT
Version 1.0: Final
Workarounds: No workarounds available
Cisco Bug IDs: CSCvr57760
CVE-2020-3511
CWE-20
CVSS Score:
7.4 AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:X/RL:X/RC:X
Summary
o A vulnerability in the ISDN subsystem of Cisco IOS Software and Cisco IOS
XE Software could allow an unauthenticated, adjacent attacker to cause a
reload of an affected device, resulting in a denial of service (DoS)
condition.
The vulnerability is due to insufficient input validation when the ISDN
Q.931 messages are processed. An attacker could exploit this vulnerability
by sending a malicious ISDN Q.931 message to an affected device. A
successful exploit could allow the attacker to cause the process to crash,
resulting in a reload of the affected device.
Cisco has released software updates that address this vulnerability. There
are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
cisco-sa-iosxe-isdn-q931-dos-67eUZBTf
This advisory is part of the September 24, 2020, release of the Cisco IOS
and IOS XE Software Security Advisory Bundled Publication, which includes
25 Cisco Security Advisories that describe 34 vulnerabilities. For a
complete list of the advisories and links to them, see Cisco Event
Response: September 2020 Semiannual Cisco IOS and IOS XE Software Security
Advisory Bundled Publication .
Affected Products
o Vulnerable Products
This vulnerability affects Cisco devices if they are running a vulnerable
release of Cisco IOS or IOS XE Software and are configured with an ISDN
interface.
For information about which Cisco software releases are vulnerable, see the
Fixed Software section of this advisory.
Determine the Device Configuration
To determine whether a device has an ISDN interface configured, use the
show running config | include isdn switch-type command in the CLI. If a
value is returned, an ISDN interface is enabled. The following example
shows the output of the command on a device with an ISDN interface:
Router#show running-config | include isdn switch-type
isdn switch-type primary-net5
Note: The exact switch type does not affect this vulnerability.
Products Confirmed Not Vulnerable
Only products listed in the Vulnerable Products section of this advisory
are known to be affected by this vulnerability.
Cisco has confirmed that this vulnerability does not affect Cisco IOS XR
Software or Cisco NX-OS Software.
Workarounds
o There are no workarounds that address this vulnerability.
Fixed Software
o Cisco has released free software updates that address the vulnerability
described in this advisory. Customers may only install and expect support
for software versions and feature sets for which they have purchased a
license. By installing, downloading, accessing, or otherwise using such
software upgrades, customers agree to follow the terms of the Cisco
software license:
https://www.cisco.com/c/en/us/products/end-user-license-agreement.html
Additionally, customers may only download software for which they have a
valid license, procured from Cisco directly, or through a Cisco authorized
reseller or partner. In most cases this will be a maintenance upgrade to
software that was previously purchased. Free security software updates do
not entitle customers to a new software license, additional software
feature sets, or major revision upgrades.
When considering software upgrades , customers are advised to regularly
consult the advisories for Cisco products, which are available from the
Cisco Security Advisories page , to determine exposure and a complete
upgrade solution.
In all cases, customers should ensure that the devices to be upgraded
contain sufficient memory and confirm that current hardware and software
configurations will continue to be supported properly by the new release.
If the information is not clear, customers are advised to contact the Cisco
Technical Assistance Center (TAC) or their contracted maintenance
providers.
Customers Without Service Contracts
Customers who purchase directly from Cisco but do not hold a Cisco service
contract and customers who make purchases through third-party vendors but
are unsuccessful in obtaining fixed software through their point of sale
should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c
/en/us/support/web/tsd-cisco-worldwide-contacts.html
Customers should have the product serial number available and be prepared
to provide the URL of this advisory as evidence of entitlement to a free
upgrade.
Cisco IOS and IOS XE Software
To help customers determine their exposure to vulnerabilities in Cisco IOS
and IOS XE Software, Cisco provides the Cisco Software Checker to identify
any Cisco Security Advisories that impact a specific software release and
the earliest release that fixes the vulnerabilities described in each
advisory ("First Fixed"). If applicable, the tool also returns the earliest
release that fixes all the vulnerabilities described in all the advisories
identified ("Combined First Fixed").
Customers can use the Cisco Software Checker to search advisories in the
following ways:
Choose the software and one or more releases
Upload a .txt file that includes a list of specific releases
Enter the output of the show version command
After initiating a search, customers can customize the search to include
all Cisco Security Advisories, a specific advisory, or all advisories in
the most recent bundled publication.
Customers can also use the following form to determine whether a release is
affected by any Cisco Security Advisory by entering a Cisco IOS or IOS XE
Software release-for example, 15.1(4)M2 or 3.13.8S :
[ ] [Check]
By default, the Cisco Software Checker includes results only for
vulnerabilities that have a Critical or High Security Impact Rating (SIR).
To include results for Medium SIR vulnerabilities, customers can use the
Cisco Software Checker on Cisco.com and check the Medium check box in the
drop-down list under Impact Rating when customizing a search.
For a mapping of Cisco IOS XE Software releases to Cisco IOS Software
releases, refer to the Cisco IOS XE 2 Release Notes , Cisco IOS XE 3S
Release Notes , or Cisco IOS XE 3SG Release Notes , depending on the Cisco
IOS XE Software release.
Exploitation and Public Announcements
o The Cisco Product Security Incident Response Team (PSIRT) is not aware of
any public announcements or malicious use of the vulnerability that is
described in this advisory.
Source
o Cisco would like to thank Austin Martinetti for reporting this
vulnerability.
Cisco Security Vulnerability Policy
o To learn about Cisco security vulnerability disclosure policies and
publications, see the Security Vulnerability Policy . This document also
contains instructions for obtaining fixed software and receiving security
vulnerability information from Cisco.
Related to This Advisory
o Cisco Event Response: September 2020 Semiannual Cisco IOS and IOS XE
Software Security Advisory Bundled Publication
URL
o https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
cisco-sa-iosxe-isdn-q931-dos-67eUZBTf
Revision History
o +----------+---------------------------+----------+--------+--------------+
| Version | Description | Section | Status | Date |
+----------+---------------------------+----------+--------+--------------+
| 1.0 | Initial public release. | - | Final | 2020-SEP-24 |
+----------+---------------------------+----------+--------+--------------+
- --------------------------------------------------------------------------------
Cisco IOS and IOS XE Software Information Disclosure Vulnerability
Priority: Medium
Advisory ID: cisco-sa-info-disclosure-V4BmJBNF
First Published: 2020 September 24 16:00 GMT
Version 1.0: Final
Workarounds: No workarounds available
Cisco Bug IDs: CSCvu10399
CVE-2020-3477
CWE-20
CVSS Score:
5.5 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:X/RL:X/RC:X
Summary
o A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE
Software could allow an authenticated, local attacker to access files from
the flash: filesystem.
The vulnerability is due to insufficient application of restrictions during
the execution of a specific command. An attacker could exploit this
vulnerability by using a specific command at the command line. A successful
exploit could allow the attacker to obtain read-only access to files that
are located on the flash: filesystem that otherwise might not have been
accessible.
Cisco has released software updates that address this vulnerability. There
are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
cisco-sa-info-disclosure-V4BmJBNF
Affected Products
o Vulnerable Products
At the time of publication, this vulnerability affected Cisco devices if
they were running a vulnerable release of Cisco IOS or IOS XE Software.
For information about which Cisco software releases are vulnerable, see the
Fixed Software section of this advisory.
Products Confirmed Not Vulnerable
Only products listed in the Vulnerable Products section of this advisory
are known to be affected by this vulnerability.
Cisco has confirmed that this vulnerability does not affect Cisco IOS XR
Software or Cisco NX-OS Software.
Workarounds
o There are no workarounds that address this vulnerability.
Fixed Software
o When considering software upgrades , customers are advised to regularly
consult the advisories for Cisco products, which are available from the
Cisco Security Advisories page , to determine exposure and a complete
upgrade solution.
In all cases, customers should ensure that the devices to be upgraded
contain sufficient memory and confirm that current hardware and software
configurations will continue to be supported properly by the new release.
If the information is not clear, customers are advised to contact the Cisco
Technical Assistance Center (TAC) or their contracted maintenance
providers.
Cisco IOS and IOS XE Software
To help customers determine their exposure to vulnerabilities in Cisco IOS
and IOS XE Software, Cisco provides the Cisco Software Checker to identify
any Cisco Security Advisories that impact a specific software release and
the earliest release that fixes the vulnerabilities described in each
advisory ("First Fixed"). If applicable, the tool also returns the earliest
release that fixes all the vulnerabilities described in all the advisories
identified ("Combined First Fixed").
Customers can use the Cisco Software Checker to search advisories in the
following ways:
Choose the software and one or more releases
Upload a .txt file that includes a list of specific releases
Enter the output of the show version command
After initiating a search, customers can customize the search to include
all Cisco Security Advisories, a specific advisory, or all advisories in
the most recent bundled publication.
Customers can also use the following form to determine whether a release is
affected by any Cisco Security Advisory by entering a Cisco IOS or IOS XE
Software release-for example, 15.1(4)M2 or 3.13.8S :
[ ] [Check]
By default, the Cisco Software Checker includes results only for
vulnerabilities that have a Critical or High Security Impact Rating (SIR).
To include results for Medium SIR vulnerabilities, customers can use the
Cisco Software Checker on Cisco.com and check the Medium check box in the
drop-down list under Impact Rating when customizing a search.
For a mapping of Cisco IOS XE Software releases to Cisco IOS Software
releases, refer to the Cisco IOS XE 2 Release Notes , Cisco IOS XE 3S
Release Notes , or Cisco IOS XE 3SG Release Notes , depending on the Cisco
IOS XE Software release.
Exploitation and Public Announcements
o The Cisco Product Security Incident Response Team (PSIRT) is not aware of
any public announcements or malicious use of the vulnerability that is
described in this advisory.
Source
o Cisco would like to thank Adeolu Owokade for reporting this vulnerability.
Cisco Security Vulnerability Policy
o To learn about Cisco security vulnerability disclosure policies and
publications, see the Security Vulnerability Policy . This document also
contains instructions for obtaining fixed software and receiving security
vulnerability information from Cisco.
URL
o https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
cisco-sa-info-disclosure-V4BmJBNF
Revision History
o +----------+---------------------------+----------+--------+--------------+
| Version | Description | Section | Status | Date |
+----------+---------------------------+----------+--------+--------------+
| 1.0 | Initial public release. | - | Final | 2020-SEP-24 |
+----------+---------------------------+----------+--------+--------------+
- --------------------------------------------------------------------------------
Cisco IOS and IOS XE Software MP-BGP EVPN Denial of Service Vulnerability
Priority: Medium
Advisory ID: cisco-sa-ios-bgp-evpn-dos-LNfYJxfF
First Published: 2020 September 24 16:00 GMT
Version 1.0: Final
Workarounds: No workarounds available
Cisco Bug IDs: CSCvr81264CSCvr83128
CVE-2020-3479
CWE-20
Summary
o A vulnerability in the implementation of Multiprotocol Border Gateway
Protocol (MP-BGP) for the Layer 2 VPN (L2VPN) Ethernet VPN (EVPN) address
family in Cisco IOS Software and Cisco IOS XE Software could allow an
unauthenticated, remote attacker to cause a denial of service (DoS)
condition.
The vulnerability is due to incorrect processing of Border Gateway Protocol
(BGP) update messages that contain crafted EVPN attributes. An attacker
could exploit this vulnerability by sending BGP update messages with
specific, malformed attributes to an affected device. A successful exploit
could allow the attacker to cause an affected device to crash, resulting in
a DoS condition.
Cisco has released software updates that address this vulnerability. There
are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
cisco-sa-ios-bgp-evpn-dos-LNfYJxfF
Affected Products
o Vulnerable Products
At the time of publication, this vulnerability affected Cisco devices if
they were running a vulnerable release of Cisco IOS or IOS XE Software and
were configured for BGP on a device with the L2VPN EVPN address family.
For information about which Cisco software releases are vulnerable, see the
Fixed Software section of this advisory.
Determine the Device Configuration
To determine whether the device has a vulnerable configuration, assess the
BGP routing configuration and then the L2VPN EVPN address family status (if
necessary).
Determine Whether the Device Is Configured for BGP Routing
To determine whether the device is configured for BGP routing, use the show
running-config | section router bgp EXEC command in the CLI. If the router
is configured for BGP, this command will return output. The following
example shows the partial output of the show running-config | section
router bgp command on a device that is configured for BGP routing:
router#show running-config | section router bgp
router bgp <AS-Number>
.
.
.
If the command returns no output, or the command returns an error, the
device is not affected by this vulnerability. If the device returns output,
proceed to the next step.
Determine Whether the Device Is Configured for the L2VPN EVPN Address
Family
To determine whether the device is configured for the BGP EVPN address
family, use the show running-config | section router bgp | address-family
l2vpn evpn EXEC command in the CLI . If the router is configured for the
BGP EVPN address family, this command will return output. The following
example shows the output of the show running-config | section router bgp |
address-family l2vpn evpn command on a device with the BGP EVPN address
family configured:
router#show running-config | section router bgp | address-family l2vpn evpn
address-family l2vpn evpn
.
.
.
If the command returns no output, or the command returns an error, the
device is not affected by this vulnerability.
Products Confirmed Not Vulnerable
Only products listed in the Vulnerable Products section of this advisory
are known to be affected by this vulnerability.
Cisco has confirmed that this vulnerability does not affect Cisco IOS XR
Software or Cisco NX-OS Software.
Details
o The Cisco implementation of MP-BGP accepts incoming BGP traffic only from
explicitly defined peers. To exploit this vulnerability, the malicious BGP
update message must originate from one of the following:
A configured, valid BGP peer
The attacker's injection into the victim's BGP network on an existing,
valid TCP connection to a BGP peer
Workarounds
o There are no workarounds that address this vulnerability.
Fixed Software
o When considering software upgrades , customers are advised to regularly
consult the advisories for Cisco products, which are available from the
Cisco Security Advisories page , to determine exposure and a complete
upgrade solution.
In all cases, customers should ensure that the devices to be upgraded
contain sufficient memory and confirm that current hardware and software
configurations will continue to be supported properly by the new release.
If the information is not clear, customers are advised to contact the Cisco
Technical Assistance Center (TAC) or their contracted maintenance
providers.
Cisco IOS and IOS XE Software
To help customers determine their exposure to vulnerabilities in Cisco IOS
and IOS XE Software, Cisco provides the Cisco Software Checker to identify
any Cisco Security Advisories that impact a specific software release and
the earliest release that fixes the vulnerabilities described in each
advisory ("First Fixed"). If applicable, the tool also returns the earliest
release that fixes all the vulnerabilities described in all the advisories
identified ("Combined First Fixed").
Customers can use the Cisco Software Checker to search advisories in the
following ways:
Choose the software and one or more releases
Upload a .txt file that includes a list of specific releases
Enter the output of the show version command
After initiating a search, customers can customize the search to include
all Cisco Security Advisories, a specific advisory, or all advisories in
the most recent bundled publication.
Customers can also use the following form to determine whether a release is
affected by any Cisco Security Advisory by entering a Cisco IOS or IOS XE
Software release-for example, 15.1(4)M2 or 3.13.8S :
[ ] [Check]
By default, the Cisco Software Checker includes results only for
vulnerabilities that have a Critical or High Security Impact Rating (SIR).
To include results for Medium SIR vulnerabilities, customers can use the
Cisco Software Checker on Cisco.com and check the Medium check box in the
drop-down list under Impact Rating when customizing a search.
For a mapping of Cisco IOS XE Software releases to Cisco IOS Software
releases, refer to the Cisco IOS XE 2 Release Notes , Cisco IOS XE 3S
Release Notes , or Cisco IOS XE 3SG Release Notes , depending on the Cisco
IOS XE Software release.
Exploitation and Public Announcements
o The Cisco Product Security Incident Response Team (PSIRT) is not aware of
any public announcements or malicious use of the vulnerability that is
described in this advisory.
Source
o This vulnerability was found during the resolution of a Cisco TAC support
case.
Cisco Security Vulnerability Policy
o To learn about Cisco security vulnerability disclosure policies and
publications, see the Security Vulnerability Policy . This document also
contains instructions for obtaining fixed software and receiving security
vulnerability information from Cisco.
URL
o https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
cisco-sa-ios-bgp-evpn-dos-LNfYJxfF
Revision History
o +----------+---------------------------+----------+--------+--------------+
| Version | Description | Section | Status | Date |
+----------+---------------------------+----------+--------+--------------+
| 1.0 | Initial public release. | - | Final | 2020-SEP-24 |
+----------+---------------------------+----------+--------+--------------+
- --------------------------------------------------------------------------------
Cisco IOS and IOS XE Software Split DNS Denial of Service Vulnerability
Priority: High
Advisory ID: cisco-sa-splitdns-SPWqpdGW
First Published: 2020 September 24 16:00 GMT
Version 1.0: Final
Workarounds: No workarounds available
Cisco Bug IDs: CSCvt78186
CVE-2020-3408
CWE-185
CVSS Score:
8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:X/RL:X/RC:X
Summary
o A vulnerability in the Split DNS feature of Cisco IOS Software and Cisco
IOS XE Software could allow an unauthenticated, remote attacker to cause an
affected device to reload, resulting in a denial of service (DoS)
condition.
The vulnerability occurs because the regular expression (regex) engine that
is used with the Split DNS feature of affected releases may time out when
it processes the DNS name list configuration. An attacker could exploit
this vulnerability by trying to resolve an address or hostname that the
affected device handles. A successful exploit could allow the attacker to
cause the device to reload, resulting in a DoS condition.
Cisco has released software updates that address this vulnerability. There
are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
cisco-sa-splitdns-SPWqpdGW
This advisory is part of the September 24, 2020, release of the Cisco IOS
and IOS XE Software Security Advisory Bundled Publication, which includes
25 Cisco Security Advisories that describe 34 vulnerabilities. For a
complete list of the advisories and links to them, see Cisco Event
Response: September 2020 Semiannual Cisco IOS and IOS XE Software Security
Advisory Bundled Publication .
Affected Products
o Vulnerable Products
This vulnerability affects Cisco devices if they are running a vulnerable
release of Cisco IOS or IOS XE Software and have the Split DNS feature
enabled with a DNS name list applied.
For information about which Cisco software releases are vulnerable, see the
Fixed Software section of this advisory.
Determine the Device Configuration
To determine whether a device has the Split DNS feature enabled and has a
DNS name list applied, log in to the device and use the show running-config
| section ip dns command in the CLI. Check the command output for the
presence of both of the following:
There are ip dns name-list commands
These commands are associated with a restrict name-group command in the
ip dns view-list configuration
The following example shows the output of the show running-config | section
ip dns command on a device that has the Split DNS feature enabled with a
DNS name list applied:
Split_DNS#show running-config | section ip dns
ip dns view-group default
ip dns view-list default
view default 10
restrict name-group 1
ip dns name-list 1 permit ^(.+\.)*168\.192\.IN-ADDR\.ARPA$
ip dns name-list 1 permit ^(.+\.)*D\.F\.IP6\.ARPA$
ip dns name-list 1 permit ^(.+\.)*C\.F\.IP6\.ARPA$
ip dns name-list 1 permit ^(.+\.)*8\.B\.D\.0\.1\.0\.0\.2\.IP6\.ARPA$
Split_DNS#
Products Confirmed Not Vulnerable
Only products listed in the Vulnerable Products section of this advisory
are known to be affected by this vulnerability.
Cisco has confirmed that this vulnerability does not Cisco IOS XR Software
or Cisco NX-OS Software.
Details
o This vulnerability can be exploited with either IPv4 or IPv6 traffic that
is processed by the Split DNS name list configuration.
Workarounds
o There are no workarounds that address this vulnerability.
Fixed Software
o Cisco has released free software updates that address the vulnerability
described in this advisory. Customers may only install and expect support
for software versions and feature sets for which they have purchased a
license. By installing, downloading, accessing, or otherwise using such
software upgrades, customers agree to follow the terms of the Cisco
software license: https://www.cisco.com/c/en/us/products/
end-user-license-agreement.html
Additionally, customers may only download software for which they have a
valid license, procured from Cisco directly, or through a Cisco authorized
reseller or partner. In most cases this will be a maintenance upgrade to
software that was previously purchased. Free security software updates do
not entitle customers to a new software license, additional software
feature sets, or major revision upgrades.
When considering software upgrades , customers are advised to regularly
consult the advisories for Cisco products, which are available from the
Cisco Security Advisories page , to determine exposure and a complete
upgrade solution.
In all cases, customers should ensure that the devices to be upgraded
contain sufficient memory and confirm that current hardware and software
configurations will continue to be supported properly by the new release.
If the information is not clear, customers are advised to contact the Cisco
Technical Assistance Center (TAC) or their contracted maintenance
providers.
Customers Without Service Contracts
Customers who purchase directly from Cisco but do not hold a Cisco service
contract and customers who make purchases through third-party vendors but
are unsuccessful in obtaining fixed software through their point of sale
should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c
/en/us/support/web/tsd-cisco-worldwide-contacts.html
Customers should have the product serial number available and be prepared
to provide the URL of this advisory as evidence of entitlement to a free
upgrade.
Cisco IOS and IOS XE Software
To help customers determine their exposure to vulnerabilities in Cisco IOS
and IOS XE Software, Cisco provides the Cisco Software Checker to identify
any Cisco Security Advisories that impact a specific software release and
the earliest release that fixes the vulnerabilities described in each
advisory ("First Fixed"). If applicable, the tool also returns the earliest
release that fixes all the vulnerabilities described in all the advisories
identified ("Combined First Fixed").
Customers can use the Cisco Software Checker to search advisories in the
following ways:
Choose the software and one or more releases
Upload a .txt file that includes a list of specific releases
Enter the output of the show version command
After initiating a search, customers can customize the search to include
all Cisco Security Advisories, a specific advisory, or all advisories in
the most recent bundled publication.
Customers can also use the following form to determine whether a release is
affected by any Cisco Security Advisory by entering a Cisco IOS or IOS XE
Software release-for example, 15.1(4)M2 or 3.13.8S :
[ ] [Check]
By default, the Cisco Software Checker includes results only for
vulnerabilities that have a Critical or High Security Impact Rating (SIR).
To include results for Medium SIR vulnerabilities, customers can use the
Cisco Software Checker on Cisco.com and check the Medium check box in the
drop-down list under Impact Rating when customizing a search.
For a mapping of Cisco IOS XE Software releases to Cisco IOS Software
releases, refer to the Cisco IOS XE 2 Release Notes , Cisco IOS XE 3S
Release Notes , or Cisco IOS XE 3SG Release Notes , depending on the Cisco
IOS XE Software release.
Exploitation and Public Announcements
o The Cisco Product Security Incident Response Team (PSIRT) is not aware of
any public announcements or malicious use of the vulnerability that is
described in this advisory.
Source
o Cisco would like to thank Michal Roszkowski for reporting this
vulnerability.
Cisco Security Vulnerability Policy
o To learn about Cisco security vulnerability disclosure policies and
publications, see the Security Vulnerability Policy . This document also
contains instructions for obtaining fixed software and receiving security
vulnerability information from Cisco.
Related to This Advisory
o Cisco Event Response: September 2020 Semiannual Cisco IOS and IOS XE
Software Security Advisory Bundled Publication
URL
o https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/
cisco-sa-splitdns-SPWqpdGW
Revision History
o +----------+---------------------------+----------+--------+--------------+
| Version | Description | Section | Status | Date |
+----------+---------------------------+----------+--------+--------------+
| 1.0 | Initial public release. | - | Final | 2020-SEP-24 |
+----------+---------------------------+----------+--------+--------------+
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=1DhJ
-----END PGP SIGNATURE-----