CVE-2023-20027

A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper reassembly of large packets that occurs when VFR is enabled on either a tunnel interface or on a physical interface that is configured with a maximum transmission unit (MTU) greater than 4,615 bytes. An attacker could exploit this vulnerability by sending fragmented packets through a VFR-enabled interface on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

• cisco ios xe 3.9.0as • cisco ios xe 3.9.1s • cisco ios xe 3.9.2s • cisco ios xe 3.10.0s • cisco ios xe 3.10.1s • cisco ios xe 3.10.2as • cisco ios xe 3.10.2s • cisco ios xe 3.10.2ts • cisco ios xe 3.10.3s • cisco ios xe 3.10.4s • cisco ios xe 3.10.5s • cisco ios xe 3.10.6s • cisco ios xe 3.10.7s • cisco ios xe 3.10.8as • cisco ios xe 3.10.8s • cisco ios xe 3.10.9s • cisco ios xe 3.10.10s • cisco ios xe 3.11.0s • cisco ios xe 3.11.1s • cisco ios xe 3.11.2s • cisco ios xe 3.11.3s • cisco ios xe 3.11.4s • cisco ios xe 3.12.0s • cisco ios xe 3.12.1s • cisco ios xe 3.12.2s • cisco ios xe 3.12.3s • cisco ios xe 3.12.4s • cisco ios xe 3.13.0s • cisco ios xe 3.13.1s • cisco ios xe 3.13.2s • cisco ios xe 3.13.3s • cisco ios xe 3.13.4s • cisco ios xe 3.13.5s • cisco ios xe 3.13.6as • cisco ios xe 3.13.6s • cisco ios xe 3.13.7s • cisco ios xe 3.13.8s • cisco ios xe 3.13.9s • cisco ios xe 3.13.10s • cisco ios xe 3.14.0s • cisco ios xe 3.14.1s • cisco ios xe 3.14.2s • cisco ios xe 3.14.3s • cisco ios xe 3.14.4s • cisco ios xe 3.15.0s • cisco ios xe 3.15.1cs • cisco ios xe 3.15.1s • cisco ios xe 3.15.2s • cisco ios xe 3.15.3s • cisco ios xe 3.15.4s • cisco ios xe 3.16.0cs • cisco ios xe 3.16.0s • cisco ios xe 3.16.1as • cisco ios xe 3.16.2s • cisco ios xe 3.16.3s • cisco ios xe 3.16.4as • cisco ios xe 3.16.4bs • cisco ios xe 3.16.4cs • cisco ios xe 3.16.4ds • cisco ios xe 3.16.4es … and 130 more