Buffer overflow in Cisco Systems, Inc products - CVE-2024-20267

Vulnerability identifier: #VU86912

CSH Severity: High

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-20267

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the handling of MPLS traffic. A remote attacker can trigger memory corruption and cause a denial of service on the target system.

Cisco Nexus 9000 Series Switches NX-OS Mode
Nexus 7000 Series Switches
Nexus 6000 Series Switches
Nexus 5600 Platform Switches
Nexus 5500 Platform Switches
Cisco Nexus 3000 Series Switches
Cisco NX-OS
PowerFlex Appliance
PowerFlex rack

Install updates from vendor's website.

Cisco NX-OS - addressed in versions 7.3(1)D1(1), 7.3(1)N1(1), 7.3(2)D1(1), 7.3(2)D1(2), 7.3(2)D1(3), 7.3(2)D1(3a), 7.3.2 N1.1, 7.3.3 D1.1, 7.3(3)N1(1), 7.3.4 D1.1, 7.3.4 N1.1, 7.3.5 D1.1, 7.3.5 N1.1, 7.3(6)D1(1), 7.3.6 N1.1, 7.3(7)D1(1), 7.3(7)N1(1), 7.3(7)N1(1a), 7.3(7)N1(1b), 7.3(8)D1(1), 7.3(8)N1(1), 7.3(9)D1(1), 7.3(9)N1(1), 7.3(10)N1(1), 7.3(11)N1(1), 7.3(12)N1(1), 7.3(13)N1(1), 7.3(14)N1(1), 8.0(1), 8.1.1, 8.1(2a), 8.1(2), 8.2(1), 8.2(2), 8.2.3, 8.2(4), 8.2.5, 8.2(6), 8.2(7a), 8.2(7), 8.2(8), 8.2(9), 8.2(10), 8.2(11), 8.3(1), 8.3.2, 8.4.1, 8.4.2, 8.4(3), 8.4(4a), 8.4(4), 8.4(5), 8.4(6a), 8.4(6), 8.4(7), 8.4(8), 8.4(9), 9.3(13), 10.2(7), 10.3(4a), 10.4(2)
PowerFlex Appliance - update to IC 45.374.00
PowerFlex rack - addressed in versions 3.6.6.0, 3.7.4.0

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv6-mpls-dos-R9ycXkwM

• Denial of service in Cisco NX-OS Software
• Multiple vulnerabilities in Dell PowerFlex Appliance
• Multiple vulnerabilities in Dell PowerFlex Rack
• Multiple vulnerabilities in Dell PowerFlex Rack