CVE-2017-4920

5.9MEDIUM

Key Information:

Vendor
Vmware
Status
Nsx-v Edge
Vendor
CVE Published:
10 August 2017

Summary

The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement (LSA). A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop or loss of connectivity.

Affected Version(s)

NSX-V Edge 6.2.x prior to 6.2.8

NSX-V Edge 6.3.x prior to 6.3.3

References

https://www.vmware.com/security/advisories/VMSA-2017-0014...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/100277
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.