BugZero | Cisco BugID CSCvd73487 - Link Layer Discovery Protocol Buffer Overflow Vuln...

Loading...

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

Enterprise platform
Bug Scrub Advisor
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

Operational Defect Database

A free repository of operational (non-security) bugs centralized through custom integrations with leading IT vendors.

Product

Enterprise platform
Bug Scrub Advisor
Operational Risk Scoring
Vendor Integrations

Company

Plans
Value Guide
About
Contact us
Legal

Resources

Blog
ServiceNow App
Trust Center
Risk Management
NIST
DORA

©2025 BugZero. All Rights Reserved.

Privacy Policy Terms of Service

BugZero | Cisco BugID CSCvd73487 - Link Layer Discovery Protocol Buffer Overflow Vuln...

ODD
Cisco
CSCvd73487

Cisco - Defect ID: CSCvd73487

Link Layer Discovery Protocol Buffer Overflow Vulnerability

ODD
Cisco
CSCvd73487

Cisco - Defect ID: CSCvd73487

Link Layer Discovery Protocol Buffer Overflow Vulnerability

Last updated on January 16th, 2026

BugZero Risk Score
9.6 High

Overall: 9.6

Severity: 10.0

Lifecycle: 9.1

Popularity: 6.0

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Bug Details

Description

Symptom

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an adjacent, unauthenticated attacker to create a DoS condition or execute arbitrary code with elevated privileges. The vulnerability exists due to improper error handling of malformed LLDP messages. An attacker that is directly connected to an interface of the affected device could exploit this vulnerability by submitting an LLDP protocol data unit (PDU) that is designed to trigger the issue. If successful, an exploitable buffer overflow condition may occur that could result in a DoS condition or the attacker gaining the ability to execute arbitrary code with elevated privileges. The Common Vulnerabilities and Exposures (CVE) ID for this vulnerability is: CVE-2018-0167 The Security Impact Rating (SIR) for this vulnerability is: High This advisory is part of the March 28, 2018, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 20 Cisco Security Advisories that describe 22 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: March 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication. This advisory is available at the following link: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp

Conditions

Devices running an affected version of Cisco IOS, Cisco IOS XE, or Cisco IOS XR software with the LLDP feature enabled. To determine whether a release is affected by any published Cisco Security Advisory, use the Cisco IOS Software Checker on Cisco.com at the following link: https://tools.cisco.com/security/center/softwarechecker.x

Workaround

None.

Further Problem Description

PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 3 score. The Base CVSS score as of the time of evaluation is 8.8: https://tools.cisco.com/security/center/cvssCalculator.x?version=3.0&vector=CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:X CVE ID CVE-2018-0167 has been assigned to document this issue. Additional information on Cisco's security vulnerability policy can be found at the following URL: http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html

Change history

2026-01-16 Added: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1f, 16.10.1g, 16.10.1i, 16.10.1s, 16.10.2, 16.10.3, 16.11.1, 16.11.1a, 16.11.1b, 16.11.1c, 16.11.1s, 16.11.2, 16.12.1, 16.12.1a, 16.12.1c, 16.12.1s, 16.12.1t, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.2, 16.12.2a, 16.12.2s, 16.12.2t, 16.12.3, 16.12.3a, 16.12.3s, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5b, 16.2.1, 16.2.2, 16.3.1, 16.3.10, 16.3.11, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.3.9, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.6.6, 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.7.4, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3a, 16.9.3h, 16.9.3s, 16.9.4, 16.9.4c, 16.9.5, 16.9.5f, 16.9.6, 16.9.7, 17.1.1, 17.1.1a, 17.1.1s, 17.1.1t, 17.1.2, 17.1.3, 17.2.1, 17.2.1a, 17.2.1r, 17.2.1v, 17.2.2, 17.2.3, 17.3.1, 17.3.1a, 17.3.1w, 17.3.1x, 17.3.2, 17.3.2a, 17.3.3, 17.3.3a, 17.3.4, 17.3.4a, 17.4.1, 17.4.1a, 17.4.1b, 17.4.2, 17.5.1, 17.5.1a, 17.6.1, 3.13.10S_V154_3_S10_FC1, 3.13.5S_V154_3_S5_FC1, 3.13.5aS_V154_3_S5A_FC2, 3.13.6S_V154_3_S6_FC1, 3.13.6aS_V154_3_S6A_FC2, 3.13.6bS_V154_3_S6B_FC1, 3.13.7S_V154_3_S7_FC3, 3.13.7aS_V154_3_S7A_FC1, 3.13.8S_V154_3_S8_FC2, 3.13.9S_V154_3_S9_FC2, 3.14.4S_V155_1_S4_FC5, 3.15.3S_V155_2_S3_FC2, 3.15.4S_V155_2_S4_FC1, 3.16.10S_V155_3_S10_FC3, 3.16.10aS_V155_3_S10A_FC8, 3.16.10bS_V155_3_S10B_FC2, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4, 3.18.7SP_V156_2_SP7_FC2, 3.18.8aSP_V156_2_SP8A_FC2, 3.18.9SP_V156_2_SP9_FC3, 3.6.4E_V152_2_E4

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1f, 16.10.1g, 16.10.1i, 16.10.1s, 16.10.2, 16.10.3, 16.11.1, 16.11.1a, 16.11.1b, 16.11.1c, 16.11.1s, 16.11.2, 16.12.1, 16.12.1a, 16.12.1c, 16.12.1s, 16.12.1t, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.2, 16.12.2a, 16.12.2s, 16.12.2t, 16.12.3, 16.12.3a, 16.12.3s, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5b, 16.2.1, 16.2.2, 16.3.1, 16.3.10, 16.3.11, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.3.9, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.6.6, 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.7.4, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3a, 16.9.3h, 16.9.3s, 16.9.4, 16.9.4c, 16.9.5, 16.9.5f, 16.9.6, 16.9.7, 17.1.1, 17.1.1a, 17.1.1s, 17.1.1t, 17.1.2, 17.1.3, 17.2.1, 17.2.1a, 17.2.1r, 17.2.1v, 17.2.2, 17.2.3, 17.3.1, 17.3.1a, 17.3.1w, 17.3.1x, 17.3.2, 17.3.2a, 17.3.3, 17.3.3a, 17.3.4, 17.3.4a, 17.4.1, 17.4.1a, 17.4.1b, 17.4.2, 17.5.1, 17.5.1a, 17.6.1, 3.13.10S_V154_3_S10_FC1, 3.13.5S_V154_3_S5_FC1, 3.13.5aS_V154_3_S5A_FC2, 3.13.6S_V154_3_S6_FC1, 3.13.6aS_V154_3_S6A_FC2, 3.13.6bS_V154_3_S6B_FC1, 3.13.7S_V154_3_S7_FC3, 3.13.7aS_V154_3_S7A_FC1, 3.13.8S_V154_3_S8_FC2, 3.13.9S_V154_3_S9_FC2, 3.14.4S_V155_1_S4_FC5, 3.15.3S_V155_2_S3_FC2, 3.15.4S_V155_2_S4_FC1, 3.16.10S_V155_3_S10_FC3, 3.16.10aS_V155_3_S10A_FC8, 3.16.10bS_V155_3_S10B_FC2, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4, 3.18.7SP_V156_2_SP7_FC2, 3.18.8aSP_V156_2_SP8A_FC2, 3.18.9SP_V156_2_SP9_FC3, 3.6.4E_V152_2_E4

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 16.1.0, 16.1.1, 16.1.2, 16.1.3, 16.10.1, 16.10.1a, 16.10.1b, 16.10.1c, 16.10.1d, 16.10.1e, 16.10.1f, 16.10.1g, 16.10.1i, 16.10.1s, 16.10.2, 16.10.3, 16.11.1, 16.11.1a, 16.11.1b, 16.11.1c, 16.11.1s, 16.11.2, 16.12.1, 16.12.1a, 16.12.1c, 16.12.1s, 16.12.1t, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.2, 16.12.2a, 16.12.2s, 16.12.2t, 16.12.3, 16.12.3a, 16.12.3s, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5b, 16.2.1, 16.2.2, 16.3.1, 16.3.10, 16.3.11, 16.3.1a, 16.3.2, 16.3.3, 16.3.3a, 16.3.4, 16.3.5, 16.3.5a, 16.3.5b, 16.3.5c, 16.3.6, 16.3.7, 16.3.8, 16.3.9, 16.4.1, 16.4.2, 16.4.3, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 16.6.1, 16.6.1a, 16.6.2, 16.6.2s, 16.6.3, 16.6.4, 16.6.4a, 16.6.4s, 16.6.5, 16.6.5a, 16.6.5b, 16.6.6, 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.7.1, 16.7.1a, 16.7.1b, 16.7.2, 16.7.3, 16.7.4, 16.8.1, 16.8.1a, 16.8.1b, 16.8.1c, 16.8.1d, 16.8.1e, 16.8.1s, 16.8.2, 16.8.3, 16.9.1, 16.9.1a, 16.9.1b, 16.9.1c, 16.9.1d, 16.9.1s, 16.9.2, 16.9.2a, 16.9.2s, 16.9.3, 16.9.3a, 16.9.3h, 16.9.3s, 16.9.4, 16.9.4c, 16.9.5, 16.9.5f, 16.9.6, 16.9.7, 17.1.1, 17.1.1a, 17.1.1s, 17.1.1t, 17.1.2, 17.1.3, 17.2.1, 17.2.1a, 17.2.1r, 17.2.1v, 17.2.2, 17.2.3, 17.3.1, 17.3.1a, 17.3.1w, 17.3.1x, 17.3.2, 17.3.2a, 17.3.3, 17.3.3a, 17.3.4, 17.3.4a, 17.4.1, 17.4.1a, 17.4.1b, 17.4.2, 17.5.1, 17.5.1a, 17.6.1, 3.13.10S_V154_3_S10_FC1, 3.13.5S_V154_3_S5_FC1, 3.13.5aS_V154_3_S5A_FC2, 3.13.6S_V154_3_S6_FC1, 3.13.6aS_V154_3_S6A_FC2, 3.13.6bS_V154_3_S6B_FC1, 3.13.7S_V154_3_S7_FC3, 3.13.7aS_V154_3_S7A_FC1, 3.13.8S_V154_3_S8_FC2, 3.13.9S_V154_3_S9_FC2, 3.14.4S_V155_1_S4_FC5, 3.15.3S_V155_2_S3_FC2, 3.15.4S_V155_2_S4_FC1, 3.16.10S_V155_3_S10_FC3, 3.16.10aS_V155_3_S10A_FC8, 3.16.10bS_V155_3_S10B_FC2, 3.16.2S_V155_3_S2_FC2, 3.16.2aS_V155_3_S2A_FC1, 3.16.2bS_V155_3_S2B_FC1, 3.16.3aS_V155_3_S3A_FC1, 3.16.4S_V155_3_S4_FC1, 3.16.4aS_V155_3_S4A_FC1, 3.16.4bS_V155_3_S4B_FC1, 3.16.4cS_V155_3_S4C_FC1, 3.16.4dS_V155_3_S4D_FC2, 3.16.4eS_V155_3_S4E_FC1, 3.16.4gS_V155_3_S4G_FC1, 3.16.5S_V155_3_S5_FC2, 3.16.5aS_V155_3_S5A_FC3, 3.16.5bS_V155_3_S5B_FC1, 3.16.6S, 3.16.6bS_V155_3_S6B_FC4, 3.16.7S_V155_3_S7_FC1, 3.16.7aS_V155_3_S7A_FC1, 3.16.7bS_V155_3_S7B_FC1, 3.16.8S_V155_3_S8_FC2, 3.16.9S_V155_3_S9_FC3, 3.17.1S_V156_1_S1_FC3, 3.17.1aS_V156_1_S1A_FC1, 3.17.2S_V156_1_S2_FC1, 3.17.3S_V156_1_S3_FC2, 3.17.4S_V156_1_S4_FC2, 3.18.0SP_V156_2_SP_FC2, 3.18.0S_V156_2_SP_FC2, 3.18.0aS_V156_2_S0A_FC1, 3.18.1SP_V156_2_SP1_FC3, 3.18.1S_V156_2_SP1_FC3, 3.18.1aSP_V156_2_SP1A_FC1, 3.18.1bSP_V156_2_SP1B_FC2, 3.18.1cSP_V156_2_SP1C_FC1, 3.18.1gSP_V156_2_SP1G_FC1, 3.18.1hSP_V156_2_SP1H_FC1, 3.18.1iSP_V156_2_SP1I_FC3, 3.18.2SP_V156_2_SP2_FC2, 3.18.2S_V156_2_SP2_FC2, 3.18.2aSP_V156_2_SP2A_FC3, 3.18.3SP_V156_2_SP3_FC4, 3.18.3S_V156_2_SP3_FC4, 3.18.3aSP_V156_2_SP3A_FC1, 3.18.3bSP_V156_2_SP3B_FC2, 3.18.4SP_V156_2_SP4_FC4, 3.18.4S_V156_2_SP4_FC4, 3.18.5SP_V156_2_SP5_FC4, 3.18.6SP_V156_2_SP6_FC4, 3.18.7SP_V156_2_SP7_FC2, 3.18.8aSP_V156_2_SP8A_FC2, 3.18.9SP_V156_2_SP9_FC3, 3.6.4E_V152_2_E4

Top Cisco Defects

9.7Defect ID: CSCwd37092
Cisco 2800,3800,4800,1562,6300 series AP:Slow TCP downloads, failing EAP-TLS in 8.10.181.0/17.3.6 SW
9.7Defect ID: CSCwj74769
After [non]pairwise key enabling and reboot, bfd ip and port mismatch on device.
9.6Defect ID: CSCvd73487
Link Layer Discovery Protocol Buffer Overflow Vulnerability
9.5Defect ID: CSCwq81750
WMI IP is null (0.0.0.0) in the CAPWAP packet while forwarding the multicast traffic
9.5Defect ID: CSCws18413
Wireless Multicast traffic fails sometimes on changing WMI interface or IP

Ready to prevent the next vendor outage?

Links

Original Vendor Announcement

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise