CVEvulnerability

CVE-2024-20312

7.4 HIGH Published 2024-03-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-03-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.4 HIGH — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weaknesses
CWE-476

Description

A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device after forming an adjacency. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2-adjacent to the affected device and have formed an adjacency.

Affected configurations

• cisco ios 15.0\(1\)ex • cisco ios 15.1\(1\)sy • cisco ios 15.1\(1\)sy1 • cisco ios 15.1\(1\)sy2 • cisco ios 15.1\(1\)sy3 • cisco ios 15.1\(1\)sy4 • cisco ios 15.1\(1\)sy5 • cisco ios 15.1\(1\)sy6 • cisco ios 15.1\(2\)sg • cisco ios 15.1\(2\)sg1 • cisco ios 15.1\(2\)sg2 • cisco ios 15.1\(2\)sg3 • cisco ios 15.1\(2\)sg4 • cisco ios 15.1\(2\)sg5 • cisco ios 15.1\(2\)sg6 • cisco ios 15.1\(2\)sg7 • cisco ios 15.1\(2\)sg8 • cisco ios 15.1\(2\)sy • cisco ios 15.1\(2\)sy1 • cisco ios 15.1\(2\)sy2 • cisco ios 15.1\(2\)sy3 • cisco ios 15.1\(2\)sy4 • cisco ios 15.1\(2\)sy4a • cisco ios 15.1\(2\)sy5 • cisco ios 15.1\(2\)sy6 • cisco ios 15.1\(2\)sy7 • cisco ios 15.1\(2\)sy8 • cisco ios 15.1\(2\)sy9 • cisco ios 15.1\(2\)sy10 • cisco ios 15.1\(2\)sy11 • cisco ios 15.1\(2\)sy12 • cisco ios 15.1\(2\)sy13 • cisco ios 15.1\(2\)sy14 • cisco ios 15.1\(2\)sy15 • cisco ios 15.1\(2\)sy16 • cisco ios 15.2\(1\)e • cisco ios 15.2\(1\)e1 • cisco ios 15.2\(1\)e2 • cisco ios 15.2\(1\)e3 • cisco ios 15.2\(1\)ey • cisco ios 15.2\(1\)s • cisco ios 15.2\(1\)s1 • cisco ios 15.2\(1\)s2 • cisco ios 15.2\(1\)sy • cisco ios 15.2\(1\)sy0a • cisco ios 15.2\(1\)sy1 • cisco ios 15.2\(1\)sy1a • cisco ios 15.2\(1\)sy2 • cisco ios 15.2\(1\)sy3 • cisco ios 15.2\(1\)sy4 • cisco ios 15.2\(1\)sy5 • cisco ios 15.2\(1\)sy6 • cisco ios 15.2\(1\)sy7 • cisco ios 15.2\(1\)sy8 • cisco ios 15.2\(2\)e • cisco ios 15.2\(2\)e1 • cisco ios 15.2\(2\)e2 • cisco ios 15.2\(2\)e3 • cisco ios 15.2\(2\)e4 • cisco ios 15.2\(2\)e5 … and 751 more

Related

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References