CVE-2024-20267

State: Published
Severity: 8.6 High
Published: Feb 28, 2024
Updated: Aug 28, 2024
Reserved: Nov 8, 2023

Description

A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. This vulnerability is due to lack of proper error checking when processing an ingress MPLS frame. An attacker could exploit this vulnerability by sending a crafted IPv6 packet that is encapsulated within an MPLS frame to an MPLS-enabled interface of the targeted device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition. Note: The IPv6 packet can be generated multiple hops away from the targeted device and then encapsulated within MPLS. The DoS condition may occur when the NX-OS device processes the packet.

Scores

CVSS	Score	Vector	Source
3.1	8.6 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	cisco

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
Cisco NX-OS SoftwareCisco	6.0(2)A3(1)Affected 6.0(2)A3(2)Affected 6.0(2)A3(4)Affected 6.0(2)A4(1)Affected 6.0(2)A4(2)Affected 6.0(2)A4(3)Affected 6.0(2)A4(4)Affected 6.0(2)A4(5)Affected 6.0(2)A4(6)Affected 6.0(2)A6(1)Affected 6.0(2)A6(1a)Affected 6.0(2)A6(2)Affected 6.0(2)A6(2a)Affected 6.0(2)A6(3)Affected 6.0(2)A6(3a)Affected 6.0(2)A6(4)Affected 6.0(2)A6(4a)Affected 6.0(2)A6(5)Affected 6.0(2)A6(5a)Affected 6.0(2)A6(5b)Affected 6.0(2)A6(6)Affected 6.0(2)A6(7)Affected 6.0(2)A6(8)Affected 6.0(2)A7(1)Affected 6.0(2)A7(1a)Affected and 180 more versions

Product

Versions

Cisco NX-OS SoftwareCisco

6.0(2)A3(1)Affected
6.0(2)A3(2)Affected
6.0(2)A3(4)Affected
6.0(2)A4(1)Affected
6.0(2)A4(2)Affected
6.0(2)A4(3)Affected
6.0(2)A4(4)Affected
6.0(2)A4(5)Affected
6.0(2)A4(6)Affected
6.0(2)A6(1)Affected
6.0(2)A6(1a)Affected
6.0(2)A6(2)Affected
6.0(2)A6(2a)Affected
6.0(2)A6(3)Affected
6.0(2)A6(3a)Affected
6.0(2)A6(4)Affected
6.0(2)A6(4a)Affected
6.0(2)A6(5)Affected
6.0(2)A6(5a)Affected
6.0(2)A6(5b)Affected
6.0(2)A6(6)Affected
6.0(2)A6(7)Affected
6.0(2)A6(8)Affected
6.0(2)A7(1)Affected
6.0(2)A7(1a)Affected
and 180 more versions

References

cisco-sa-ipv6-mpls-dos-R9ycXkwM

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.