====================================================================


                             CERT-Renater

                 Note d'Information No. 2018/VULN179
_____________________________________________________________________

DATE                : 03/05/2018

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Cisco Wireless LAN Controller software.

=====================================================================
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-wlc-mfdos
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-wlc-ip
_____________________________________________________________________

Cisco Security Advisory: Cisco Wireless LAN Controller 802.11 Management
Frame Denial of Service Vulnerability

Advisory ID: cisco-sa-20180502-wlc-mfdos

Revision: 1.0

For Public Release: 2018 May 2 16:00 GMT

Last Updated: 2018 May 2 16:00 GMT

CVE ID(s): CVE-2018-0235

CVSS Score v(3): 7.4 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

+---------------------------------------------------------------------

Summary

=======

A vulnerability in the 802.11 frame validation functionality of the
Cisco Wireless LAN Controller (WLC) could allow an unauthenticated,
adjacent attacker to cause an affected device to reload unexpectedly,
resulting in a denial of service (DoS) condition.

The vulnerability is due to incomplete input validation of certain
802.11 management information element frames that an affected device
receives from wireless clients. An attacker could exploit this
vulnerability by sending a malformed 802.11 management frame to an
affected device. A successful exploit could allow the attacker to cause
the affected device to reload unexpectedly, resulting in a DoS condition.

Cisco has released software updates that address this vulnerability.
There are no workarounds that address this vulnerability.

This advisory is available at the following link:

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-wlc-mfdos
["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-wlc-mfdos"]

_____________________________________________________________________

Cisco Security Advisory: Cisco Wireless LAN Controller IP Fragment
Reassembly Denial of Service Vulnerability

Advisory ID: cisco-sa-20180502-wlc-ip

Revision: 1.0

For Public Release: 2018 May 2 16:00 GMT

Last Updated: 2018 May 2 16:00 GMT

CVE ID(s): CVE-2018-0252

CVSS Score v(3): 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

+---------------------------------------------------------------------

Summary

=======

A vulnerability in the IP Version 4 (IPv4) fragment reassembly function
of Cisco 3500, 5500, and 8500 Series Wireless LAN Controller Software
could allow an unauthenticated, remote attacker to cause an affected
device to reload unexpectedly, resulting in a denial of service (DoS)
condition.

The vulnerability is due to a corruption of an internal data structure
process that occurs when the affected software reassembles certain IPv4
packets. An attacker could exploit this vulnerability by sending certain
malformed IPv4 fragments to an affected device. A successful exploit
could allow the attacker to cause the device to reload, resulting in a
DoS condition.

Cisco has released software updates that address this vulnerability.
There are no workarounds that address this vulnerability.

This advisory is available at the following link:

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-wlc-ip
["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-wlc-ip"]

==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================