Files
vuln-cve/data/2024/20xxx/CVE-2024-20267.json
T

958 lines
37 KiB
JSON

{
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"cveMetadata": {
"cveId": "CVE-2024-20267",
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"state": "PUBLISHED",
"assignerShortName": "cisco",
"dateReserved": "2023-11-08T15:08:07.624Z",
"datePublished": "2024-02-28T16:15:18.044Z",
"dateUpdated": "2024-08-28T14:13:57.631Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco",
"dateUpdated": "2024-02-28T16:15:18.044Z"
},
"descriptions": [
{
"lang": "en",
"value": "A vulnerability with the handling of MPLS traffic for Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the netstack process to unexpectedly restart, which could cause the device to stop processing network traffic or to reload. \r\n\r This vulnerability is due to lack of proper error checking when processing an ingress MPLS frame. An attacker could exploit this vulnerability by sending a crafted IPv6 packet that is encapsulated within an MPLS frame to an MPLS-enabled interface of the targeted device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition.\r\n\r Note: The IPv6 packet can be generated multiple hops away from the targeted device and then encapsulated within MPLS. The DoS condition may occur when the NX-OS device processes the packet."
}
],
"affected": [
{
"vendor": "Cisco",
"product": "Cisco NX-OS Software",
"versions": [
{
"version": "6.0(2)A3(1)",
"status": "affected"
},
{
"version": "6.0(2)A3(2)",
"status": "affected"
},
{
"version": "6.0(2)A3(4)",
"status": "affected"
},
{
"version": "6.0(2)A4(1)",
"status": "affected"
},
{
"version": "6.0(2)A4(2)",
"status": "affected"
},
{
"version": "6.0(2)A4(3)",
"status": "affected"
},
{
"version": "6.0(2)A4(4)",
"status": "affected"
},
{
"version": "6.0(2)A4(5)",
"status": "affected"
},
{
"version": "6.0(2)A4(6)",
"status": "affected"
},
{
"version": "6.0(2)A6(1)",
"status": "affected"
},
{
"version": "6.0(2)A6(1a)",
"status": "affected"
},
{
"version": "6.0(2)A6(2)",
"status": "affected"
},
{
"version": "6.0(2)A6(2a)",
"status": "affected"
},
{
"version": "6.0(2)A6(3)",
"status": "affected"
},
{
"version": "6.0(2)A6(3a)",
"status": "affected"
},
{
"version": "6.0(2)A6(4)",
"status": "affected"
},
{
"version": "6.0(2)A6(4a)",
"status": "affected"
},
{
"version": "6.0(2)A6(5)",
"status": "affected"
},
{
"version": "6.0(2)A6(5a)",
"status": "affected"
},
{
"version": "6.0(2)A6(5b)",
"status": "affected"
},
{
"version": "6.0(2)A6(6)",
"status": "affected"
},
{
"version": "6.0(2)A6(7)",
"status": "affected"
},
{
"version": "6.0(2)A6(8)",
"status": "affected"
},
{
"version": "6.0(2)A7(1)",
"status": "affected"
},
{
"version": "6.0(2)A7(1a)",
"status": "affected"
},
{
"version": "6.0(2)A7(2)",
"status": "affected"
},
{
"version": "6.0(2)A7(2a)",
"status": "affected"
},
{
"version": "6.0(2)A8(1)",
"status": "affected"
},
{
"version": "6.0(2)A8(2)",
"status": "affected"
},
{
"version": "6.0(2)A8(3)",
"status": "affected"
},
{
"version": "6.0(2)A8(4)",
"status": "affected"
},
{
"version": "6.0(2)A8(4a)",
"status": "affected"
},
{
"version": "6.0(2)A8(5)",
"status": "affected"
},
{
"version": "6.0(2)A8(6)",
"status": "affected"
},
{
"version": "6.0(2)A8(7)",
"status": "affected"
},
{
"version": "6.0(2)A8(7a)",
"status": "affected"
},
{
"version": "6.0(2)A8(7b)",
"status": "affected"
},
{
"version": "6.0(2)A8(8)",
"status": "affected"
},
{
"version": "6.0(2)A8(9)",
"status": "affected"
},
{
"version": "6.0(2)A8(10a)",
"status": "affected"
},
{
"version": "6.0(2)A8(10)",
"status": "affected"
},
{
"version": "6.0(2)A8(11)",
"status": "affected"
},
{
"version": "6.0(2)A8(11a)",
"status": "affected"
},
{
"version": "6.0(2)A8(11b)",
"status": "affected"
},
{
"version": "6.0(2)U2(1)",
"status": "affected"
},
{
"version": "6.0(2)U2(2)",
"status": "affected"
},
{
"version": "6.0(2)U2(3)",
"status": "affected"
},
{
"version": "6.0(2)U2(4)",
"status": "affected"
},
{
"version": "6.0(2)U2(5)",
"status": "affected"
},
{
"version": "6.0(2)U2(6)",
"status": "affected"
},
{
"version": "6.0(2)U3(1)",
"status": "affected"
},
{
"version": "6.0(2)U3(2)",
"status": "affected"
},
{
"version": "6.0(2)U3(3)",
"status": "affected"
},
{
"version": "6.0(2)U3(4)",
"status": "affected"
},
{
"version": "6.0(2)U3(5)",
"status": "affected"
},
{
"version": "6.0(2)U3(6)",
"status": "affected"
},
{
"version": "6.0(2)U3(7)",
"status": "affected"
},
{
"version": "6.0(2)U3(8)",
"status": "affected"
},
{
"version": "6.0(2)U3(9)",
"status": "affected"
},
{
"version": "6.0(2)U4(1)",
"status": "affected"
},
{
"version": "6.0(2)U4(2)",
"status": "affected"
},
{
"version": "6.0(2)U4(3)",
"status": "affected"
},
{
"version": "6.0(2)U4(4)",
"status": "affected"
},
{
"version": "6.0(2)U5(1)",
"status": "affected"
},
{
"version": "6.0(2)U5(2)",
"status": "affected"
},
{
"version": "6.0(2)U5(3)",
"status": "affected"
},
{
"version": "6.0(2)U5(4)",
"status": "affected"
},
{
"version": "6.0(2)U6(1)",
"status": "affected"
},
{
"version": "6.0(2)U6(2)",
"status": "affected"
},
{
"version": "6.0(2)U6(3)",
"status": "affected"
},
{
"version": "6.0(2)U6(4)",
"status": "affected"
},
{
"version": "6.0(2)U6(5)",
"status": "affected"
},
{
"version": "6.0(2)U6(6)",
"status": "affected"
},
{
"version": "6.0(2)U6(7)",
"status": "affected"
},
{
"version": "6.0(2)U6(8)",
"status": "affected"
},
{
"version": "6.0(2)U6(1a)",
"status": "affected"
},
{
"version": "6.0(2)U6(2a)",
"status": "affected"
},
{
"version": "6.0(2)U6(3a)",
"status": "affected"
},
{
"version": "6.0(2)U6(4a)",
"status": "affected"
},
{
"version": "6.0(2)U6(5a)",
"status": "affected"
},
{
"version": "6.0(2)U6(5b)",
"status": "affected"
},
{
"version": "6.0(2)U6(5c)",
"status": "affected"
},
{
"version": "6.0(2)U6(9)",
"status": "affected"
},
{
"version": "6.0(2)U6(10)",
"status": "affected"
},
{
"version": "6.2(2)",
"status": "affected"
},
{
"version": "6.2(2a)",
"status": "affected"
},
{
"version": "6.2(6)",
"status": "affected"
},
{
"version": "6.2(6b)",
"status": "affected"
},
{
"version": "6.2(8)",
"status": "affected"
},
{
"version": "6.2(8a)",
"status": "affected"
},
{
"version": "6.2(8b)",
"status": "affected"
},
{
"version": "6.2(10)",
"status": "affected"
},
{
"version": "6.2(12)",
"status": "affected"
},
{
"version": "6.2(18)",
"status": "affected"
},
{
"version": "6.2(16)",
"status": "affected"
},
{
"version": "6.2(14)",
"status": "affected"
},
{
"version": "6.2(6a)",
"status": "affected"
},
{
"version": "6.2(20)",
"status": "affected"
},
{
"version": "6.2(20a)",
"status": "affected"
},
{
"version": "6.2(22)",
"status": "affected"
},
{
"version": "6.2(24)",
"status": "affected"
},
{
"version": "6.2(24a)",
"status": "affected"
},
{
"version": "7.0(3)F1(1)",
"status": "affected"
},
{
"version": "7.0(3)F2(1)",
"status": "affected"
},
{
"version": "7.0(3)F2(2)",
"status": "affected"
},
{
"version": "7.0(3)F3(1)",
"status": "affected"
},
{
"version": "7.0(3)F3(2)",
"status": "affected"
},
{
"version": "7.0(3)F3(3)",
"status": "affected"
},
{
"version": "7.0(3)F3(3a)",
"status": "affected"
},
{
"version": "7.0(3)F3(4)",
"status": "affected"
},
{
"version": "7.0(3)F3(3c)",
"status": "affected"
},
{
"version": "7.0(3)F3(5)",
"status": "affected"
},
{
"version": "7.0(3)I2(2a)",
"status": "affected"
},
{
"version": "7.0(3)I2(2b)",
"status": "affected"
},
{
"version": "7.0(3)I2(2c)",
"status": "affected"
},
{
"version": "7.0(3)I2(2d)",
"status": "affected"
},
{
"version": "7.0(3)I2(2e)",
"status": "affected"
},
{
"version": "7.0(3)I2(3)",
"status": "affected"
},
{
"version": "7.0(3)I2(4)",
"status": "affected"
},
{
"version": "7.0(3)I2(5)",
"status": "affected"
},
{
"version": "7.0(3)I2(1)",
"status": "affected"
},
{
"version": "7.0(3)I2(1a)",
"status": "affected"
},
{
"version": "7.0(3)I2(2)",
"status": "affected"
},
{
"version": "7.0(3)I3(1)",
"status": "affected"
},
{
"version": "7.0(3)I4(1)",
"status": "affected"
},
{
"version": "7.0(3)I4(2)",
"status": "affected"
},
{
"version": "7.0(3)I4(3)",
"status": "affected"
},
{
"version": "7.0(3)I4(4)",
"status": "affected"
},
{
"version": "7.0(3)I4(5)",
"status": "affected"
},
{
"version": "7.0(3)I4(6)",
"status": "affected"
},
{
"version": "7.0(3)I4(7)",
"status": "affected"
},
{
"version": "7.0(3)I4(8)",
"status": "affected"
},
{
"version": "7.0(3)I4(8a)",
"status": "affected"
},
{
"version": "7.0(3)I4(8b)",
"status": "affected"
},
{
"version": "7.0(3)I4(8z)",
"status": "affected"
},
{
"version": "7.0(3)I4(9)",
"status": "affected"
},
{
"version": "7.0(3)I5(1)",
"status": "affected"
},
{
"version": "7.0(3)I5(2)",
"status": "affected"
},
{
"version": "7.0(3)I6(1)",
"status": "affected"
},
{
"version": "7.0(3)I6(2)",
"status": "affected"
},
{
"version": "7.0(3)I7(1)",
"status": "affected"
},
{
"version": "7.0(3)I7(2)",
"status": "affected"
},
{
"version": "7.0(3)I7(3)",
"status": "affected"
},
{
"version": "7.0(3)I7(4)",
"status": "affected"
},
{
"version": "7.0(3)I7(5)",
"status": "affected"
},
{
"version": "7.0(3)I7(5a)",
"status": "affected"
},
{
"version": "7.0(3)I7(6)",
"status": "affected"
},
{
"version": "7.0(3)I7(7)",
"status": "affected"
},
{
"version": "7.0(3)I7(8)",
"status": "affected"
},
{
"version": "7.0(3)I7(9)",
"status": "affected"
},
{
"version": "7.0(3)I7(10)",
"status": "affected"
},
{
"version": "7.1(0)N1(1a)",
"status": "affected"
},
{
"version": "7.1(0)N1(1b)",
"status": "affected"
},
{
"version": "7.1(0)N1(1)",
"status": "affected"
},
{
"version": "7.1(1)N1(1)",
"status": "affected"
},
{
"version": "7.1(2)N1(1)",
"status": "affected"
},
{
"version": "7.1(3)N1(1)",
"status": "affected"
},
{
"version": "7.1(3)N1(2)",
"status": "affected"
},
{
"version": "7.1(4)N1(1)",
"status": "affected"
},
{
"version": "7.1(5)N1(1)",
"status": "affected"
},
{
"version": "7.1(5)N1(1b)",
"status": "affected"
},
{
"version": "7.2(0)D1(1)",
"status": "affected"
},
{
"version": "7.2(1)D1(1)",
"status": "affected"
},
{
"version": "7.2(2)D1(2)",
"status": "affected"
},
{
"version": "7.2(2)D1(1)",
"status": "affected"
},
{
"version": "7.3(0)D1(1)",
"status": "affected"
},
{
"version": "7.3(0)DX(1)",
"status": "affected"
},
{
"version": "7.3(0)N1(1)",
"status": "affected"
},
{
"version": "9.2(1)",
"status": "affected"
},
{
"version": "9.2(2)",
"status": "affected"
},
{
"version": "9.2(2t)",
"status": "affected"
},
{
"version": "9.2(3)",
"status": "affected"
},
{
"version": "9.2(4)",
"status": "affected"
},
{
"version": "9.2(2v)",
"status": "affected"
},
{
"version": "9.3(1)",
"status": "affected"
},
{
"version": "9.3(2)",
"status": "affected"
},
{
"version": "9.3(3)",
"status": "affected"
},
{
"version": "9.3(4)",
"status": "affected"
},
{
"version": "9.3(5)",
"status": "affected"
},
{
"version": "9.3(6)",
"status": "affected"
},
{
"version": "9.3(7)",
"status": "affected"
},
{
"version": "9.3(7a)",
"status": "affected"
},
{
"version": "9.3(8)",
"status": "affected"
},
{
"version": "9.3(9)",
"status": "affected"
},
{
"version": "9.3(10)",
"status": "affected"
},
{
"version": "9.3(11)",
"status": "affected"
},
{
"version": "9.3(12)",
"status": "affected"
},
{
"version": "10.1(1)",
"status": "affected"
},
{
"version": "10.1(2)",
"status": "affected"
},
{
"version": "10.1(2t)",
"status": "affected"
},
{
"version": "10.2(1)",
"status": "affected"
},
{
"version": "10.2(1q)",
"status": "affected"
},
{
"version": "10.2(2)",
"status": "affected"
},
{
"version": "10.2(3)",
"status": "affected"
},
{
"version": "10.2(3t)",
"status": "affected"
},
{
"version": "10.2(4)",
"status": "affected"
},
{
"version": "10.2(5)",
"status": "affected"
},
{
"version": "10.2(3v)",
"status": "affected"
},
{
"version": "10.2(6)",
"status": "affected"
},
{
"version": "10.3(1)",
"status": "affected"
},
{
"version": "10.3(2)",
"status": "affected"
},
{
"version": "10.3(3)",
"status": "affected"
},
{
"version": "10.3(99w)",
"status": "affected"
},
{
"version": "10.3(99x)",
"status": "affected"
},
{
"version": "10.4(1)",
"status": "affected"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')",
"type": "cwe",
"cweId": "CWE-120"
}
]
}
],
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv6-mpls-dos-R9ycXkwM",
"name": "cisco-sa-ipv6-mpls-dos-R9ycXkwM"
}
],
"metrics": [
{
"format": "cvssV3_1",
"cvssV3_1": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
}
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"source": {
"advisory": "cisco-sa-ipv6-mpls-dos-R9ycXkwM",
"discovery": "EXTERNAL",
"defects": [
"CSCwh42690",
"CSCva52387"
]
}
},
"adp": [
{
"providerMetadata": {
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE",
"dateUpdated": "2024-08-01T21:52:31.664Z"
},
"title": "CVE Program Container",
"references": [
{
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv6-mpls-dos-R9ycXkwM",
"name": "cisco-sa-ipv6-mpls-dos-R9ycXkwM",
"tags": [
"x_transferred"
]
}
]
},
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2024-03-05T15:17:32.267858Z",
"id": "CVE-2024-20267",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2024-08-28T14:13:57.631Z"
}
}
]
}
}