CVE-2024-20311

State: Published
Severity: 8.6 High
Published: Mar 27, 2024
Updated: Aug 27, 2024
Reserved: Nov 8, 2023

Description

A vulnerability in the Locator ID Separation Protocol (LISP) feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. This vulnerability is due to the incorrect handling of LISP packets. An attacker could exploit this vulnerability by sending a crafted LISP packet to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition. Note: This vulnerability could be exploited over either IPv4 or IPv6 transport.

Scores

CVSS	Score	Vector	Source
3.1	8.6 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	cisco

Weaknesses

CWE-674 Uncontrolled Recursion

Affected Products

Product	Versions
IOSCisco	15.1(1)XBAffected 15.2(1)SAffected 15.2(2)SAffected 15.2(1)S1Affected 15.2(4)SAffected 15.2(1)S2Affected 15.2(2)S1Affected 15.2(2)S2Affected 15.2(2)S0aAffected 15.2(2)S0cAffected 15.2(4)S1Affected 15.2(4)S4Affected 15.2(4)S6Affected 15.2(4)S2Affected 15.2(4)S5Affected 15.2(4)S3Affected 15.2(4)S3aAffected 15.2(4)S4aAffected 15.2(4)S7Affected 15.3(1)TAffected 15.3(2)TAffected 15.3(1)T1Affected 15.3(1)T2Affected 15.3(1)T3Affected 15.3(1)T4Affected and 365 more versions
Cisco IOS XE SoftwareCisco	3.7.0SAffected 3.7.1SAffected 3.7.2SAffected 3.7.3SAffected 3.7.4SAffected 3.7.5SAffected 3.7.6SAffected 3.7.7SAffected 3.7.4aSAffected 3.7.2tSAffected 3.7.0bSAffected 3.7.1aSAffected 3.8.0SAffected 3.8.1SAffected 3.8.2SAffected 3.9.1SAffected 3.9.0SAffected 3.9.2SAffected 3.9.1aSAffected 3.9.0aSAffected 3.10.0SAffected 3.10.1SAffected 3.10.2SAffected 3.10.3SAffected 3.10.4SAffected and 293 more versions

Product

Versions

IOSCisco

15.1(1)XBAffected
15.2(1)SAffected
15.2(2)SAffected
15.2(1)S1Affected
15.2(4)SAffected
15.2(1)S2Affected
15.2(2)S1Affected
15.2(2)S2Affected
15.2(2)S0aAffected
15.2(2)S0cAffected
15.2(4)S1Affected
15.2(4)S4Affected
15.2(4)S6Affected
15.2(4)S2Affected
15.2(4)S5Affected
15.2(4)S3Affected
15.2(4)S3aAffected
15.2(4)S4aAffected
15.2(4)S7Affected
15.3(1)TAffected
15.3(2)TAffected
15.3(1)T1Affected
15.3(1)T2Affected
15.3(1)T3Affected
15.3(1)T4Affected
and 365 more versions

Cisco IOS XE SoftwareCisco

3.7.0SAffected
3.7.1SAffected
3.7.2SAffected
3.7.3SAffected
3.7.4SAffected
3.7.5SAffected
3.7.6SAffected
3.7.7SAffected
3.7.4aSAffected
3.7.2tSAffected
3.7.0bSAffected
3.7.1aSAffected
3.8.0SAffected
3.8.1SAffected
3.8.2SAffected
3.9.1SAffected
3.9.0SAffected
3.9.2SAffected
3.9.1aSAffected
3.9.0aSAffected
3.10.0SAffected
3.10.1SAffected
3.10.2SAffected
3.10.3SAffected
3.10.4SAffected
and 293 more versions

References

cisco-sa-lisp-3gYXs3qP

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.