Cisco delivers five IOS patches on new schedule

By

Cisco has corrected five vulnerabilities in its Internetwork Operating System (IOS), used to manage its routers, with patches covering vulnerabilities that could be exploited to manipulate data, expose sensitive information and launch denial-of-service (DoS) attacks, according to Secunia.

Cisco delivers five IOS patches on new schedule
The vulnerability tracking firm rated the bugs "moderately critical."

Among the notable fixes, Cisco said that its IOS contains multiple vulnerabilities in the Data-Link Switching (DLSw) feature that could cause the system to reboot or cause memory leaks when processing specially crafted UDP or IP 91 protocol packets.

The company also patched its IOS after learning that Internet Protocol version 6 (IPv6) devices may be subject to a DoS attack.

Cisco reported a vulnerability in its implementation of Multicast Virtual Private Network (MVPN) is also exploitable.

Beginning with this latest round of patches, the company will release bundles of IOS security advisories on the fourth Wednesday in March and September. Cisco follows in the footsteps of Microsoft and Oracle, which deliver their patches on a schedule.

See original article on scmagazineus.com
Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Phishing attack nets enormous npm supply chain compromise

Phishing attack nets enormous npm supply chain compromise

VicRoads to phase out passwords in favour of passkeys

VicRoads to phase out passwords in favour of passkeys

Service NSW centralises security, networking in mammoth CloudOps overhaul

Service NSW centralises security, networking in mammoth CloudOps overhaul

Apple adds "mercenary spyware" protection to new A19 chip

Apple adds "mercenary spyware" protection to new A19 chip

Log In

  |  Forgot your password?