PT-2024-2328 · Cisco · Cisco Ios Xr
Published
2024-03-13
·
Updated
2024-03-13
·
CVE-2024-20266
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
Cisco IOS XR Software (affected versions not specified)
Description
A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trigger a crash of the dhcpd process, resulting in a denial of service (DoS) condition. This vulnerability exists because certain DHCPv4 messages are improperly validated when they are processed by an affected device. An attacker could exploit this vulnerability by sending a malformed DHCPv4 message to an affected device. A successful exploit could allow the attacker to cause a crash of the dhcpd process. While the dhcpd process is restarting, which may take approximately two minutes, DHCPv4 server services are unavailable on the affected device. This could temporarily prevent network access to clients that join the network during that time period and rely on the DHCPv4 server of the affected device.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
However, Cisco has released software updates that address this vulnerability.
As a temporary workaround, consider restricting access to the DHCPv4 server feature until a patch is available.
Note that only the dhcpd process crashes and eventually restarts automatically, and the router does not reload.
This vulnerability only applies to DHCPv4, and DHCP version 6 (DHCPv6) is not affected.
DoS
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Ios Xr