CVE-2018-0167—Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

PUBLISHEDvulnerability record
2022-03-03 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2018-0167
Project:
Cisco
Product:
IOS, XR, and XE Software
Date Added:
2022-03-03
Due Date:
2022-03-17
Last Updated:
June 21, 2025

Vulnerability Name

Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

Description

There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
Unknown

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2018-0167

Related Weaknesses

browse all CVEs