CVE-2017-3803

Severity: medium (CVSS 4.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-01-26 · updated 2026-06-17
Weakness: CWE-772

Description

A vulnerability in the Cisco IOS Software forwarding queue of Cisco 2960X and 3750X switches could allow an unauthenticated, adjacent attacker to cause a memory leak in the software forwarding queue that would eventually lead to a partial denial of service (DoS) condition. More Information: CSCva72252. Known Affected Releases: 15.2(2)E3 15.2(4)E1. Known Fixed Releases: 15.2(2)E6 15.2(4)E3 15.2(5)E1 15.2(5.3.28i)E1 15.2(6.0.49i)E 3.9(1)E.

Affected products

Cisco IOS: 15.2(2)e3, 15.2(4)e1

References

http://www.securityfocus.com/bid/95632
http://www.securitytracker.com/id/1037657
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-catalyst
http://www.securityfocus.com/bid/95632
http://www.securitytracker.com/id/1037657
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-catalyst

Get alerted when CVE-2017-3803 or the next vulnerability affects your stack