CVE-2017-3826
Quick assessment
Affected
n/a Cisco NetFlow Generation Appliance
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco NetFlow Generation Appliance（NGA）是美国思科（Cisco）公司的一套可扩展的用于数据中心实现流量可见性的解决方案。该方案提供流量分析和其他需求管理等功能。Stream Control Transmission Protocol（SCTP）decoder是其中的一个流控制传输协议解码器。 Cisco NGA 3140版本、3240版本和3340版本中的SCTP decoder存在拒绝服务漏洞。远程攻击者可通过发送特制的SCTP数据包利用该漏洞造成设备挂起或重载，导
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2017-3826
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Stream Control Transmission Protocol (SCTP) decoder of the Cisco NetFlow Generation Appliance (NGA) with software before 1.1(1a) could allow an unauthenticated, remote attacker to cause the device to hang or unexpectedly reload, causing a denial of service (DoS) condition. The vulnerability is due to incomplete validation of SCTP packets being monitored on the NGA data ports. An attacker could exploit this vulnerability by sending malformed SCTP packets on a network that is monitored by an NGA data port. SCTP packets addressed to the IP address of the NGA itself will not trigger this vulnerability. An exploit could allow the attacker to cause the appliance to become unresponsive or reload, causing a DoS condition. User interaction could be needed to recover the device using the reboot command from the CLI. The following Cisco NetFlow Generation Appliances are vulnerable: NGA 3140, NGA 3240, NGA 3340. Cisco Bug IDs: CSCvc83320.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
资源管理错误
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco NetFlow Generation Appliance 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco NetFlow Generation Appliance（NGA）是美国思科（Cisco）公司的一套可扩展的用于数据中心实现流量可见性的解决方案。该方案提供流量分析和其他需求管理等功能。Stream Control Transmission Protocol（SCTP）decoder是其中的一个流控制传输协议解码器。 Cisco NGA 3140版本、3240版本和3340版本中的SCTP decoder存在拒绝服务漏洞。远程攻击者可通过发送特制的SCTP数据包利用该漏洞造成设备挂起或重载，导
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Cisco NetFlow Generation Appliance | Cisco NetFlow Generation Appliance | - |
|
II. Public POCs for CVE-2017-3826
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2017-3826
请登录查看更多情报信息。
Vendor Advisories for CVE-2017-3826 (3)
Same Patch Batch · n/a · 2017-03-01 · 49 CVEs total
| CVE-2017-5851 | Mp3splt 安全漏洞 | |
| CVE-2017-5854 | PoDoFo 安全漏洞 | |
| CVE-2017-5886 | PoDoFo 缓冲区错误漏洞 | |
| CVE-2017-5977 | ZZIPlib 安全漏洞 | |
| CVE-2017-5978 | ZZIPlib 安全漏洞 | |
| CVE-2017-5979 | ZZIPlib 安全漏洞 | |
| CVE-2017-5980 | ZZIPlib 安全漏洞 | |
| CVE-2017-5981 | ZZIPlib 安全漏洞 | |
| CVE-2017-5976 | ZZIPlib 缓冲区错误漏洞 | |
| CVE-2017-5852 | PoDoFo 安全漏洞 | |
| CVE-2017-5853 | PoDoFo 数字错误漏洞 | |
| CVE-2017-5666 | Mp3splt 安全漏洞 | |
| CVE-2017-5665 | libmp3splt 安全漏洞 | |
| CVE-2017-5504 | JasPer 缓冲区错误漏洞 | |
| CVE-2017-5503 | JasPer 缓冲区错误漏洞 | |
| CVE-2017-5502 | JasPer 安全漏洞 | |
| CVE-2017-5501 | JasPer 数字错误漏洞 | |
| CVE-2017-5500 | JasPer 安全漏洞 | |
| CVE-2017-5499 | JasPer 数字错误漏洞 | |
| CVE-2017-5498 | JasPer 数字错误漏洞 |
Showing top 20 of 49 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2017-3826
No comments yet