CVE-2017-6678

A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 19.2 through 21.0 could allow an unauthenticated, remote attacker to cause both control function (CF) instances on an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient handling of user-supplied data by the affected software. An attacker could exploit this vulnerability by sending crafted UDP packets to the distributed instance (DI) network addresses of both CF instances on an affected system. A successful exploit could allow the attacker to cause an unhandled error condition on the affected system, which would cause the CF instances to reload and consequently cause the entire VPC to reload, resulting in the disconnection of all subscribers and a DoS condition on the affected system. This vulnerability can be exploited via IPv4 traffic only. Cisco Bug IDs: CSCvc01665 CSCvc35565.

• CWE-399
• CWE-755

• http://www.securityfocus.com/bid/99195Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-vpcVendor Advisory
• http://www.securityfocus.com/bid/99195Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-vpcVendor Advisory

Published

Jun 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6670A vulnerability in the web-based GUI of Cisco Unified Commun…
• CVE-2017-6671A vulnerability in the email message scanning of Cisco Async…
• CVE-2017-6672A vulnerability in certain filtering mechanisms of access co…
• CVE-2017-6673A vulnerability in Cisco Firepower Management Center could a…
• CVE-2017-6674A vulnerability in the feature-license management functional…
• CVE-2017-6675A vulnerability in the web interface of Cisco Industrial Net…
• CVE-2017-6679The Cisco Umbrella Virtual Appliance Version 2.0.3 and prior…6.4
• CVE-2017-6680A vulnerability in the AutoVNF logging function of Cisco Ult…
• CVE-2017-6681A vulnerability in the AutoVNF VNFStagingView class of Cisco…
• CVE-2017-6682A vulnerability in the ConfD CLI of Cisco Elastic Services C…
• CVE-2017-6683A vulnerability in the esc_listener.py script of Cisco Elast…
• CVE-2017-6684A vulnerability in Cisco Elastic Services Controllers could …