CVE-2018-0282

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state. While this vulnerability potentially affects all TCP applications, the only affected application observed so far is the HTTP server. An attacker could exploit this vulnerability by sending specific HTTP requests at a sustained rate to a reachable IP address of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition on an affected device.

• CWE-371

• http://www.securityfocus.com/bid/106510Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-tcpVendor Advisory
• http://www.securityfocus.com/bid/106510Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-tcpVendor Advisory

Published

Jan 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0276A vulnerability in Cisco WebEx Connect IM could allow an una…
• CVE-2018-0277A vulnerability in the Extensible Authentication Protocol-Tr…
• CVE-2018-0278A vulnerability in the management console of Cisco Firepower…6.5
• CVE-2018-0279A vulnerability in the Secure Copy Protocol (SCP) server of …8.8
• CVE-2018-0280A vulnerability in the Real-Time Transport Protocol (RTP) bi…
• CVE-2018-0281A vulnerability in the detection engine of Cisco Firepower S…
• CVE-2018-0283A vulnerability in the detection engine of Cisco Firepower S…
• CVE-2018-0284A vulnerability in the local status page functionality of th…
• CVE-2018-0285A vulnerability in service logging for Cisco Prime Service C…
• CVE-2018-0286A vulnerability in the netconf interface of Cisco IOS XR Sof…5.3
• CVE-2018-0287A vulnerability in the Cisco WebEx Network Recording Player …
• CVE-2018-0288A vulnerability in Cisco WebEx Recording Format (WRF) Player…5.3