CVE-2016-1361

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-03-12 · updated 2026-06-17
Weakness: CWE-399

Description

Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows remote attackers to cause a denial of service (line-card restart) via a crafted packet, aka Bug ID CSCuw56900.

Affected products

Cisco IOS XR Software: 3.3.3, 3.4.1, 3.4.2, 3.4.3, 3.5.2, 3.5.3 (+28)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr
http://www.securitytracker.com/id/1035314
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr
http://www.securitytracker.com/id/1035314

Get alerted when CVE-2016-1361 or the next vulnerability affects your stack