---
id: "CVE-2018-0167"
kind: "vulnerability"
aliases: ["CVE-2018-0167"]
title: "Cisco IOS, XR, and XE Software: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability"
severity: "high"
cvss: 8.8
epss: 0.03354
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Cisco IOS, XR, and XE Software", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["cisco", "exploited", "infrastructure", "ios", "ios-xe", "ios-xr", "network-gear"]
not_affected_if: ["lldp-disabled", "no-cisco-ios-devices"]
published_at: "2018-03-28T22:29:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0167", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0167", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0167", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Cisco IOS, XR, and XE Software: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

A buffer overflow in the LLDP subsystem of Cisco IOS, IOS XE and IOS XR lets a nearby attacker crash the device or run arbitrary code on it. No login is needed, and CISA lists it as exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Cisco IOS, XR, and XE Software affected ? fixed ?

## Fix

Apply the Cisco IOS, IOS XE or IOS XR update named in the Cisco advisory for this CVE; the sources do not name the fixed versions.
If LLDP is not needed, disable it globally with 'no lldp run' as a stopgap (unverified in sources).

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0167
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2018-0167
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2018-0167

## From the sources

Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCuo17183, CSCvd73487.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_