NULL pointer dereference in Cisco IOS XR Software

Published: 2024-03-14

Risk	Medium
Patch available	YES
Number of vulnerabilities	1
CVE-ID	CVE-2024-20266
CWE-ID	CWE-476
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	Cisco IOS XR Operating systems & Components / Operating system Cisco 8000 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco 8201 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco 8202 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco 8808 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco 8812 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco 8818 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9000 Series Aggregation Services Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9001 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9006 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9010 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9901 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9902 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9903 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9904 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9906 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9910 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9912 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 16-Slot Line Card Chassis Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 16-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 4-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 8-Slot Line Card Chassis Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 8-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 Fabric Card Chassis Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 Line Card Chassis (Dual) Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 Line Card Chassis (Multi) Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-1 Multishelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-3 4-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-3 8-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-3 Multishelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-X 16-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-X 8-Slot Single-Shelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco CRS-X Multishelf System Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco IOS XRv 9000 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 4001 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 4009 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 4016 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-12Z20G-SYS-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-12Z20G-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-24Q8L2DD-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-24Z8Q2C-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-28Z4C-SYS-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-28Z4C-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-6Z14S-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-6Z18G-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-ACC-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-FH-AGG Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540-FH-CSR-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-12Z16G-SYS-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-12Z16G-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-16Z4G8Q2C-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-16Z4G8Q2C-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-16Z8Q2C-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-4Z14G2Q-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-4Z14G2Q-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-6Z18G-SYS-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-6Z18G-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-8Z16G-SYS-A Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-8Z16G-SYS-D Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 540X-ACC-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 560-4-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 560-4-SYS-E Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 560-4-SYS-E-CC Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 560-7-SYS Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 560-7-SYS-E Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco NCS 6008 - 8-Slot Chassis Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 1001 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 1002 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 1004 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 4000 Series Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 500 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5000 Series Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5001 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5002 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5011 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 540 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 540 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5500 Series Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5501 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5501-SE Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5502 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5502-SE Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5504 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5508 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5516 Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-24H Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-24Q6H-S Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-24Q6H-SS Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-36H Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-36H-SE Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A1-48Q6H Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A2-MOD-HD-S Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A2-MOD-S Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 55A2-MOD-SE-S Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 560 Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 560 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 5700 Series Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 57B1-5DSE-SYS Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 57B1-6D24-SYS Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 57C3-MOD Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 6000 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System NCS-57C1-48Q6-SYS Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System NCS-57D2-18DD-SYS Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco ASR 9922 Router Client/Desktop applications / Software for system administration Cisco Carrier Routing System Hardware solutions / Firmware Cisco Network Convergence System 1000 Series Hardware solutions / Firmware
Vendor	Cisco Systems, Inc

Security Bulletin

This security bulletin contains one medium risk vulnerability.

1) NULL pointer dereference

EUVDB-ID: #VU87523

Risk: Medium

CVSSv3.1: 4.6 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2024-20266

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the DHCP version 4 (DHCPv4) server feature. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Cisco IOS XR: 7.9 - 24.1

Cisco 8000 Series Routers: All versions

Cisco 8201 Router: All versions

Cisco 8202 Router: All versions

Cisco 8808 Router: All versions

Cisco 8812 Router: All versions

Cisco 8818 Router: All versions

Cisco ASR 9000 Series Aggregation Services Routers: All versions

Cisco ASR 9001 Router: All versions

Cisco ASR 9006 Router: All versions

Cisco ASR 9010 Router: All versions

Cisco ASR 9901 Router: All versions

Cisco ASR 9902 Router: All versions

Cisco ASR 9903 Router: All versions

Cisco ASR 9904 Router: All versions

Cisco ASR 9906 Router: All versions

Cisco ASR 9910 Router: All versions

Cisco ASR 9912 Router: All versions

Cisco ASR 9922 Router: All versions

Cisco CRS-1 16-Slot Line Card Chassis: All versions

Cisco CRS-1 16-Slot Single-Shelf System: All versions

Cisco CRS-1 4-Slot Single-Shelf System: All versions

Cisco CRS-1 8-Slot Line Card Chassis: All versions

Cisco CRS-1 8-Slot Single-Shelf System: All versions

Cisco CRS-1 Fabric Card Chassis: All versions

Cisco CRS-1 Line Card Chassis (Dual): All versions

Cisco CRS-1 Line Card Chassis (Multi): All versions

Cisco CRS-1 Multishelf System: All versions

Cisco CRS-3 4-Slot Single-Shelf System: All versions

Cisco CRS-3 8-Slot Single-Shelf System: All versions

Cisco CRS-3 Multishelf System: All versions

Cisco CRS-X 16-Slot Single-Shelf System: All versions

Cisco CRS-X 8-Slot Single-Shelf System: All versions

Cisco CRS-X Multishelf System: All versions

Cisco Carrier Routing System: All versions

Cisco IOS XRv 9000 Router: All versions

Cisco NCS 4001: All versions

Cisco NCS 4009: All versions

Cisco NCS 4016: All versions

Cisco NCS 540-12Z20G-SYS-A Router: All versions

Cisco NCS 540-12Z20G-SYS-D Router: All versions

Cisco NCS 540-24Q8L2DD-SYS Router: All versions

Cisco NCS 540-24Z8Q2C-SYS Router: All versions

Cisco NCS 540-28Z4C-SYS-A Router: All versions

Cisco NCS 540-28Z4C-SYS-D Router: All versions

Cisco NCS 540-6Z14S-SYS-D Router: All versions

Cisco NCS 540-6Z18G-SYS-D Router: All versions

Cisco NCS 540-ACC-SYS Router: All versions

Cisco NCS 540-FH-AGG Router: All versions

Cisco NCS 540-FH-CSR-SYS Router: All versions

Cisco NCS 540X-12Z16G-SYS-A Router: All versions

Cisco NCS 540X-12Z16G-SYS-D Router: All versions

Cisco NCS 540X-16Z4G8Q2C-A Router: All versions

Cisco NCS 540X-16Z4G8Q2C-D Router: All versions

Cisco NCS 540X-16Z8Q2C-D Router: All versions

Cisco NCS 540X-4Z14G2Q-A Router: All versions

Cisco NCS 540X-4Z14G2Q-D Router: All versions

Cisco NCS 540X-6Z18G-SYS-A Router: All versions

Cisco NCS 540X-6Z18G-SYS-D Router: All versions

Cisco NCS 540X-8Z16G-SYS-A Router: All versions

Cisco NCS 540X-8Z16G-SYS-D Router: All versions

Cisco NCS 540X-ACC-SYS Router: All versions

Cisco NCS 560-4-SYS Router: All versions

Cisco NCS 560-4-SYS-E Router: All versions

Cisco NCS 560-4-SYS-E-CC Router: All versions

Cisco NCS 560-7-SYS Router: All versions

Cisco NCS 560-7-SYS-E Router: All versions

Cisco NCS 6008 - 8-Slot Chassis: All versions

Cisco Network Convergence System 1000 Series: All versions

Cisco Network Convergence System 1001: All versions

Cisco Network Convergence System 1002: All versions

Cisco Network Convergence System 1004: All versions

Cisco Network Convergence System 4000 Series: All versions

Cisco Network Convergence System 500 Series Routers: All versions

Cisco Network Convergence System 5000 Series: All versions

Cisco Network Convergence System 5001: All versions

Cisco Network Convergence System 5002: All versions

Cisco Network Convergence System 5011: All versions

Cisco Network Convergence System 540 Router: All versions

Cisco Network Convergence System 540 Series Routers: All versions

Cisco Network Convergence System 5500 Series: All versions

Cisco Network Convergence System 5501: All versions

Cisco Network Convergence System 5501-SE: All versions

Cisco Network Convergence System 5502: All versions

Cisco Network Convergence System 5502-SE: All versions

Cisco Network Convergence System 5504: All versions

Cisco Network Convergence System 5508: All versions

Cisco Network Convergence System 5516: All versions

Cisco Network Convergence System 55A1-24H: All versions

Cisco Network Convergence System 55A1-24Q6H-S: All versions

Cisco Network Convergence System 55A1-24Q6H-SS: All versions

Cisco Network Convergence System 55A1-36H: All versions

Cisco Network Convergence System 55A1-36H-SE: All versions

Cisco Network Convergence System 55A1-48Q6H: All versions

Cisco Network Convergence System 55A2-MOD-HD-S: All versions

Cisco Network Convergence System 55A2-MOD-S: All versions

Cisco Network Convergence System 55A2-MOD-SE-S: All versions

Cisco Network Convergence System 560 Router: All versions

Cisco Network Convergence System 560 Series Routers: All versions

Cisco Network Convergence System 5700 Series: All versions

Cisco Network Convergence System 57B1-5DSE-SYS: All versions

Cisco Network Convergence System 57B1-6D24-SYS: All versions

Cisco Network Convergence System 57C3-MOD: All versions

Cisco Network Convergence System 6000 Series Routers: All versions

Cisco Network Convergence System NCS-57C1-48Q6-SYS: All versions

Cisco Network Convergence System NCS-57D2-18DD-SYS: All versions

External links

http://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-dhcp-dos-3tgPKRdm

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.