Cisco · Cisco Ios Xe · CVE-2024-20464
Name of the Vulnerable Software and Affected Versions:
Cisco IOS XE Software (affected versions not specified)
Description:
A vulnerability in the Protocol Independent Multicast (PIM) feature could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This issue is due to insufficient validation of received IPv4 PIMv2 packets. An attacker could exploit this by sending a crafted PIMv2 packet to a PIM-enabled interface on an affected device, potentially causing the device to reload and resulting in a DoS condition. The vulnerability can be exploited with either an IPv4 multicast or unicast packet.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.