CVE:CVE-2018-0158
CNNVD:CNNVD-201803-1032
Cisco IOS Software和IOS XE Software都是美国思科（Cisco）公司为其网络设备开发的操作系统。Internet Key Exchange Version 2（IKEv2）module是其中的一个网络秘钥交换模块。
Cisco IOS Software和IOS XE Software中的IKEv2模块存在输入验证漏洞，该漏洞源于程序没有正确的处理IKEv2数据包。远程攻击者可通过发送特制的IKEv2数据包利用该漏洞造成拒绝服务（内存泄露或设备重新加载）。
solution:Upgrade cisco ios to a higher version than 15.5(3s1.1,15.5(3s1.2,15.5(3s1.4,15.5(3s1.5,15.5(3s1.7,15.5(3s1.8,15.5(3s1.9,15.5(3s1.10,15.5(3s1.11,15.5(3s1.12,and avoid the version 15.5(3)s1.1,15.5(3)s1.2,15.5(3)s1.4,15.5(3)s1.5,15.5(3)s1.7,15.5(3)s1.8,15.5(3)s1.9,15.5(3)s1.10,15.5(3)s1.11,15.5(3)s1.12; Upgrade cisco ios_xe to a higher version than 15.5(3s1.1,15.5(3s1.2,15.5(3s1.4,15.5(3s1.5,15.5(3s1.7,15.5(3s1.8,15.5(3s1.9,15.5(3s1.10,15.5(3s1.11,15.5(3s1.12,and avoid the version 15.5(3)s1.1,15.5(3)s1.2,15.5(3)s1.4,15.5(3)s1.5,15.5(3)s1.7,15.5(3)s1.8,15.5(3)s1.9,15.5(3)s1.10,15.5(3)s1.11,15.5(3)s1.12