CVE-2018-0132

A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base (RIB) and the FIB, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect processing of extremely long routing updates. An attacker could exploit this vulnerability by sending a large routing update. A successful exploit could allow the attacker to trigger inconsistency between the FIB and the RIB, resulting in a DoS condition. Cisco Bug IDs: CSCus84718.

• CWE-119
• CWE-119

• http://www.securityfocus.com/bid/102975Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040344Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-iosxrVendor Advisory
• http://www.securityfocus.com/bid/102975Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040344Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-iosxrVendor Advisory

Published

Feb 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0125A vulnerability in the web interface of the Cisco RV132W ADS…9.8
• CVE-2018-0127A vulnerability in the web interface of Cisco RV132W ADSL2+ …9.8
• CVE-2018-0128A vulnerability in the web-based management interface of Cis…
• CVE-2018-0129A vulnerability in the web-based management interface of Cis…
• CVE-2018-0130A vulnerability in the use of JSON web tokens by the web-bas…
• CVE-2018-0131A vulnerability in the implementation of RSA-encrypted nonce…
• CVE-2018-0134A vulnerability in the RADIUS authentication module of Cisco…5.3
• CVE-2018-0135A vulnerability in Cisco Unified Communications Manager coul…
• CVE-2018-0136A vulnerability in the IPv6 subsystem of Cisco IOS XR Softwa…8.6
• CVE-2018-0137A vulnerability in the TCP throttling process of Cisco Prime…
• CVE-2018-0138A vulnerability in the detection engine of Cisco Firepower S…5.3
• CVE-2018-0139A vulnerability in the Interactive Voice Response (IVR) mana…8.6