PT-2020-1888 · Cisco · Cisco Ios Xr

Published 2020-03-04 · Updated 2020-03-06 · CVE-2020-3190

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software (affected versions not specified)

Description The issue is related to the implementation of the IPsec protocol set in Cisco IOS XR Software, which is associated with uncontrolled resource consumption. This could allow a remote attacker to cause a denial of service (DoS) condition for IPsec sessions to an affected device. The vulnerability is due to improper handling of packets by the IPsec packet processor. An attacker could exploit this vulnerability by sending malicious ICMP error messages to an affected device that get processed by the IPsec packet processor, potentially depleting IPsec memory and causing all future IPsec packets to an affected device to be dropped. Manual intervention is required to recover from this situation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2020-01164

CVE-2020-3190

Affected Products

Cisco Ios Xr

References · 4

• https://bdu.fstec.ru/vul/2020-01164 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipsec-dos-q8UPX6m · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3190 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3190 · Vendor Advisory