====================================================================

                                 CERT-Renater

                      Note d'Information No. 2016/VULN138
_____________________________________________________________________

DATE                : 24/03/2016

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Cisco IOS Software.

======================================================================
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f
_____________________________________________________________________

Cisco Security Advisory: Cisco IOS Software Wide Area Application 
Services Express Denial of Service Vulnerability

Advisory ID: cisco-sa-20160323-l4f

Revision 1.0

For Public Release 2016 March 23 16:00  GMT

+---------------------------------------------------------------------

Summary
=======

A vulnerability in the Wide Area Application Services (WAAS) Express
feature of Cisco IOS Software could allow an unauthenticated, remote
attacker to cause an affected device to reload.

The vulnerability is due to insufficient validation of TCP segments. An
attacker could exploit this vulnerability by routing a crafted TCP
segment through an affected device. A successful exploit could allow
the attacker to cause the affected device to reload, causing a denial
of service (DoS) condition.

To exploit this vulnerability, the attacker needs to route a crafted
TCP segment through an egress interface of a device because the
vulnerable function is an output feature of the software. In addition,
the WAAS Express feature must be enabled on the interface, typically a
WAN interface. In most deployments, this means crafted traffic must be
initiated from within a device to exploit the vulnerability.

Cisco has released software updates that address this vulnerability.
There are no workarounds that address this vulnerability.

This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f

This advisory is part of the March 23, 2016, release of the Cisco IOS
and IOS XE Software Security Advisory Bundled Publication, which
includes six Cisco Security Advisories that describe six
vulnerabilities. All the vulnerabilities have a Security Impact Rating
of "High." For a complete list of advisories and links to them, see
Cisco Event Response:
http://www.cisco.com/c/en/us/about/security-center/event-response/cisco-erp-march-2016.html

==========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================