PT-2024-2328 · Cisco · Cisco Ios Xr

Published

2024-03-13

·

Updated

2024-03-13

·

CVE-2024-20266

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software (affected versions not specified)
Description A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to trigger a crash of the dhcpd process, resulting in a denial of service (DoS) condition. This vulnerability exists because certain DHCPv4 messages are improperly validated when they are processed by an affected device. An attacker could exploit this vulnerability by sending a malformed DHCPv4 message to an affected device. A successful exploit could allow the attacker to cause a crash of the dhcpd process. While the dhcpd process is restarting, which may take approximately two minutes, DHCPv4 server services are unavailable on the affected device. This could temporarily prevent network access to clients that join the network during that time period and rely on the DHCPv4 server of the affected device.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. However, Cisco has released software updates that address this vulnerability. As a temporary workaround, consider restricting access to the DHCPv4 server feature until a patch is available. Note that only the dhcpd process crashes and eventually restarts automatically, and the router does not reload. This vulnerability only applies to DHCPv4, and DHCP version 6 (DHCPv6) is not affected.

DoS

NULL Pointer Dereference

Weakness Enumeration

Related Identifiers

BDU:2024-02270
CVE-2024-20266

Affected Products

Cisco Ios Xr