Aller au contenu
en Se connecter
7.4 Élevée

CVE-2024-20318 A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent…

Description

A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the line card network processor to reset, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of specific Ethernet frames that are received on line cards that have the Layer 2 services feature enabled. An attacker could exploit this vulnerability by sending specific Ethernet frames through an affected device. A successful exploit could allow the attacker to cause the ingress interface network processor to reset, resulting in a loss of traffic over the interfaces that are supported by the network processor. Multiple resets of the network processor would cause the line card to reset, resulting in a DoS condition.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco IOS XR Software 7.9.1 Pas de correctif indiqué
Cisco IOS XR Software 7.8 7.8.1 → 7.8.2 Pas de correctif indiqué
Cisco IOS XR Software 7.7 7.7.1 → 7.7.2 Pas de correctif indiqué
Cisco IOS XR Software 7.6 7.6.1 → 7.6.2 Pas de correctif indiqué
Cisco IOS XR Software 7.5 7.5.1 → 7.5.5 Pas de correctif indiqué
Cisco IOS XR Software 7.4 7.4.1 → 7.4.2 Pas de correctif indiqué
Cisco IOS XR Software 7.3 7.3.1 → 7.3.5 Pas de correctif indiqué
Cisco IOS XR Software 7.1 7.1.1 → 7.1.15 Pas de correctif indiqué
Cisco IOS XR Software 7.0 7.0.1 → 7.0.2 Pas de correctif indiqué
Afficher les 5 autres branches
Produit Versions touchées Corrigé en
Cisco IOS XR Software 6.9 6.9.1 → 6.9.2 Pas de correctif indiqué
Cisco IOS XR Software 6.8 6.8.1 → 6.8.2 Pas de correctif indiqué
Cisco IOS XR Software 6.7 6.7.1 → 6.7.3 Pas de correctif indiqué
Cisco IOS XR Software 6.6 6.6.2 → 6.6.25 Pas de correctif indiqué
Cisco IOS XR Software 6.5 6.5.2 → 6.5.3 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco IOS XR Software

Les 115 CVE de Cisco IOS XR Software →
CVE-2026-76505 A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and… 7.5 Élevée CVE-2026-20278 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… 8.8 Élevée CVE-2026-20280 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software… 8.8 Élevée CVE-2026-20279 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… 9.8 Critique
Suivre cette CVE