Cisco NX-OS Software Vulnerability Could Lead to Unexpected Restart or Denial of Service

CVE-2024-20267

Summary

An issue exists in the handling of MPLS traffic within Cisco's NX-OS Software that allows an unauthenticated remote adversary to trigger unexpected restarts of the netstack process. This vulnerability stems from insufficient error handling when dealing with ingress MPLS frames. An attacker can exploit this vulnerability by dispatching a specially crafted IPv6 packet encapsulated in an MPLS frame to the targeted device's MPLS-enabled interface. Such exploitation may result in a denial of service condition as the NX-OS device attempts to process the malicious packet. Notably, the IPv6 packet can originate multiple hops away from the device, facilitating potential remote attacks.

References