Cisco IOS XR Software Vulnerability Could Lead to Denial of Service

CVE-2024-20318

What is CVE-2024-20318?

A vulnerability exists within Cisco's IOS XR Software that impacts its Layer 2 Ethernet services. This flaw allows an unauthenticated, adjacent attacker to exploit the software by sending specially crafted Ethernet frames to a vulnerable device. The improper handling of these frames may cause the ingress interface network processor to reset, subsequently leading to a denial of service (DoS) condition for the affected device. Repeated attacks could result in multiple resets, overwhelming the line card and causing significant interruptions to traffic flow through the involved interfaces.

References