CVE-2017-3864 Cisco IOS and IOS XE Software DHCP Client Denial of Service Vulnerability (cisco-sa-20170322-dhcpc)

A vulnerability in the DHCP client implementation of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service condition.
The vulnerability occurs during the parsing of a crafted DHCP packet.

An attacker could exploit this vulnerability by sending crafted DHCP packets to an affected device that is configured as a DHCP client. A successful exploit could allow the attacker to cause a reload of an affected device, resulting in a denial of service condition.

Refer to Cisco advisory cisco-sa-20170322-dhcpc for updates and patch information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

cisco-sa-20170322-dhcpc: CISCO IOS