{"schemaVersion":3,"id":"CVE-2018-0158","aliases":[],"status":"published","duplicateOf":null,"title":"Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","description":"A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. Cisco Bug IDs: CSCvf22394.","dates":{"published":"2018-03-28T22:00:00.000Z","modified":"2026-01-12T21:54:43.737Z","reserved":null,"kevAdded":["2022-03-03T00:00:00.000Z"],"kevDue":["2022-03-17T00:00:00.000Z"]},"cvss":{"headline":{"score":8.6,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.6,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.8,"severity":"high","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0719,"percentile":0.94245,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.0719},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0719,"percentile":0.94245}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0719,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0719,"percentile":0.94245}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-03T00:00:00.000Z","dueDate":"2022-03-17T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","description":"A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-0158","label":"nvd.nist.gov/vuln/detail/CVE-2018-0158"}],"vendor":"Cisco","product":"IOS Software and Cisco IOS XE Software","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-03-03T00:00:00.000Z","dueDate":"2022-03-17T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","description":"A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-0158","label":"nvd.nist.gov/vuln/detail/CVE-2018-0158"}],"vendor":"Cisco","product":"IOS Software and Cisco IOS XE Software","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"},{"id":"CWE-401","name":"Missing Release of Memory after Effective Lifetime","description":"The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.","type":"weakness","status":"Draft","abstraction":"Variant","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/401.html"}],"affected":[{"vendor":"cisco","product":"ios","name":"ios","label":"ios","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"15.5\\(3\\)s1.1","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.2","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.4","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.5","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.7","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.8","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.9","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.10","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.11","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"15.5\\(3\\)s1.1 | 15.5\\(3\\)s1.2 | 15.5\\(3\\)s1.4 | 15.5\\(3\\)s1.5 | 15.5\\(3\\)s1.7 | 15.5\\(3\\)s1.8 | 15.5\\(3\\)s1.9 | 15.5\\(3\\)s1.10 | 15.5\\(3\\)s1.11 | 15.5\\(3\\)s1.12","eol":null,"hubHref":"/vendor/cisco/ios"},{"vendor":"cisco","product":"ios_xe","name":"ios xe","label":"ios_xe","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"15.5\\(3\\)s1.1","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.2","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.4","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.5","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.7","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.8","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.9","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.10","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.11","noFixRecorded":false,"fixedIn":null},{"text":"15.5\\(3\\)s1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"15.5\\(3\\)s1.1 | 15.5\\(3\\)s1.2 | 15.5\\(3\\)s1.4 | 15.5\\(3\\)s1.5 | 15.5\\(3\\)s1.7 | 15.5\\(3\\)s1.8 | 15.5\\(3\\)s1.9 | 15.5\\(3\\)s1.10 | 15.5\\(3\\)s1.11 | 15.5\\(3\\)s1.12","eol":null,"hubHref":"/vendor/cisco/ios_xe"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/103566","label":"www.securityfocus.com/bid/103566","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03","label":"ics-cert.us-cert.gov/advisories/ICSA-18-107-03","hostname":"ics-cert.us-cert.gov","tags":["X Refsource MISC","Third Party Advisory","US Government Resource","VDB Entry"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04","label":"ics-cert.us-cert.gov/advisories/ICSA-18-107-04","hostname":"ics-cert.us-cert.gov","tags":["X Refsource MISC","Third Party Advisory","US Government Resource","VDB Entry"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike","label":"tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike","hostname":"tools.cisco.com","tags":["X Refsource CONFIRM","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1040595","label":"www.securitytracker.com/id/1040595","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0158","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0158","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-03-28T22:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-03-03T00:00:00.000Z","label":"Added to CISA KEV","detail":"Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-03-17T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2026-01-12T21:54:43.737Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:47:31.707Z","stale":false,"partial":false}}