Skip to content
fr Sign in
7.4 High

CVE-2024-20318 A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent…

Description

A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the line card network processor to reset, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of specific Ethernet frames that are received on line cards that have the Layer 2 services feature enabled. An attacker could exploit this vulnerability by sending specific Ethernet frames through an affected device. A successful exploit could allow the attacker to cause the ingress interface network processor to reset, resulting in a loss of traffic over the interfaces that are supported by the network processor. Multiple resets of the network processor would cause the line card to reset, resulting in a DoS condition.

Affected products and versions

Product Affected versions Fixed in
Cisco IOS XR Software 7.9.1 No fix stated
Cisco IOS XR Software 7.8 7.8.1 → 7.8.2 No fix stated
Cisco IOS XR Software 7.7 7.7.1 → 7.7.2 No fix stated
Cisco IOS XR Software 7.6 7.6.1 → 7.6.2 No fix stated
Cisco IOS XR Software 7.5 7.5.1 → 7.5.5 No fix stated
Cisco IOS XR Software 7.4 7.4.1 → 7.4.2 No fix stated
Cisco IOS XR Software 7.3 7.3.1 → 7.3.5 No fix stated
Cisco IOS XR Software 7.1 7.1.1 → 7.1.15 No fix stated
Cisco IOS XR Software 7.0 7.0.1 → 7.0.2 No fix stated
Show the 5 other branches
Product Affected versions Fixed in
Cisco IOS XR Software 6.9 6.9.1 → 6.9.2 No fix stated
Cisco IOS XR Software 6.8 6.8.1 → 6.8.2 No fix stated
Cisco IOS XR Software 6.7 6.7.1 → 6.7.3 No fix stated
Cisco IOS XR Software 6.6 6.6.2 → 6.6.25 No fix stated
Cisco IOS XR Software 6.5 6.5.2 → 6.5.3 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco IOS XR Software

The 115 CVEs of Cisco IOS XR Software →
CVE-2026-76505 A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and… 7.5 High CVE-2026-20278 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… 8.8 High CVE-2026-20280 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software… 8.8 High CVE-2026-20279 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… 9.8 Critical
Track this CVE