CVE-2024-20307

State: Published
Severity: 6.8 Medium
Published: Mar 27, 2024
Updated: Aug 1, 2024
Reserved: Nov 8, 2023

Description

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap overflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1 packets are not properly reassembled. An attacker could exploit this vulnerability by sending crafted UDP packets to an affected system. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: Only traffic that is directed to the affected system can be used to exploit this vulnerability. This vulnerability can be triggered by IPv4 and IPv6 traffic.

Scores

CVSS	Score	Vector	Source
3.1	6.8 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H	cisco

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
IOSCisco	15.1(2)SG8Affected 15.2(4)M11Affected 15.1(2)SY8Affected 15.1(2)SY9Affected 15.1(2)SY10Affected 15.1(2)SY11Affected 15.1(2)SY12Affected 15.1(2)SY13Affected 15.1(2)SY14Affected 15.1(2)SY15Affected 15.1(2)SY16Affected 15.3(3)S8Affected 15.3(3)S9Affected 15.3(3)S10Affected 15.3(3)S8aAffected 15.2(4)E2Affected 15.2(3)E4Affected 15.2(5)EAffected 15.2(4)E3Affected 15.2(5b)EAffected 15.2(3)E5Affected 15.2(4)E4Affected 15.2(4)E5Affected 15.2(4)E5aAffected 15.2(4)E6Affected and 122 more versions
Cisco IOS XE SoftwareCisco	3.4.8SGAffected 3.10.8SAffected 3.10.8aSAffected 3.10.9SAffected 3.10.10SAffected 3.13.6SAffected 3.13.7SAffected 3.13.6aSAffected 3.13.7aSAffected 3.13.8SAffected 3.13.9SAffected 3.13.10SAffected 3.14.4SAffected 3.15.4SAffected 3.7.4EAffected 3.7.5EAffected 3.16.3SAffected 3.16.3aSAffected 3.16.4SAffected 3.16.4aSAffected 3.16.4bSAffected 3.16.5SAffected 3.16.4dSAffected 3.16.6SAffected 3.16.7SAffected and 193 more versions

Product

Versions

IOSCisco

15.1(2)SG8Affected
15.2(4)M11Affected
15.1(2)SY8Affected
15.1(2)SY9Affected
15.1(2)SY10Affected
15.1(2)SY11Affected
15.1(2)SY12Affected
15.1(2)SY13Affected
15.1(2)SY14Affected
15.1(2)SY15Affected
15.1(2)SY16Affected
15.3(3)S8Affected
15.3(3)S9Affected
15.3(3)S10Affected
15.3(3)S8aAffected
15.2(4)E2Affected
15.2(3)E4Affected
15.2(5)EAffected
15.2(4)E3Affected
15.2(5b)EAffected
15.2(3)E5Affected
15.2(4)E4Affected
15.2(4)E5Affected
15.2(4)E5aAffected
15.2(4)E6Affected
and 122 more versions

Cisco IOS XE SoftwareCisco

3.4.8SGAffected
3.10.8SAffected
3.10.8aSAffected
3.10.9SAffected
3.10.10SAffected
3.13.6SAffected
3.13.7SAffected
3.13.6aSAffected
3.13.7aSAffected
3.13.8SAffected
3.13.9SAffected
3.13.10SAffected
3.14.4SAffected
3.15.4SAffected
3.7.4EAffected
3.7.5EAffected
3.16.3SAffected
3.16.3aSAffected
3.16.4SAffected
3.16.4aSAffected
3.16.4bSAffected
3.16.5SAffected
3.16.4dSAffected
3.16.6SAffected
3.16.7SAffected
and 193 more versions

References

cisco-sa-ikev1-NO2ccFWz

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.