8.6
CVE-2021-34720
- EPSS 1.29%
- Veröffentlicht 09.09.2021 05:15:11
- Zuletzt bearbeitet 21.11.2024 06:11:02
- Erkennungen
LoginCisco IOS XR Software IP Service Level Agreements and Two-Way Active Measurement Protocol Denial of Service Vulnerability
A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause device packet memory to become exhausted or cause the IP SLA process to crash, resulting in a denial of service (DoS) condition. This vulnerability exists because socket creation failures are mishandled during the IP SLA and TWAMP processes. An attacker could exploit this vulnerability by sending specific IP SLA or TWAMP packets to an affected device. A successful exploit could allow the attacker to exhaust the packet memory, which will impact other processes, such as routing protocols, or crash the IP SLA process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xr Version < 6.2.3
Cisco ≫ Asr 9000v-v2 Version -
Cisco ≫ Asr 9001 Version -
Cisco ≫ Asr 9006 Version -
Cisco ≫ Asr 9010 Version -
Cisco ≫ Asr 9901 Version -
Cisco ≫ Asr 9902 Version -
Cisco ≫ Asr 9903 Version -
Cisco ≫ Asr 9904 Version -
Cisco ≫ Asr 9906 Version -
Cisco ≫ Asr 9910 Version -
Cisco ≫ Asr 9912 Version -
Cisco ≫ Asr 9922 Version -
Cisco ≫ Asr 9001 Version -
Cisco ≫ Asr 9006 Version -
Cisco ≫ Asr 9010 Version -
Cisco ≫ Asr 9901 Version -
Cisco ≫ Asr 9902 Version -
Cisco ≫ Asr 9903 Version -
Cisco ≫ Asr 9904 Version -
Cisco ≫ Asr 9906 Version -
Cisco ≫ Asr 9910 Version -
Cisco ≫ Asr 9912 Version -
Cisco ≫ Asr 9922 Version -
Cisco ≫ Ios Xr Version >= 6.3.0 < 6.3.2
Cisco ≫ Asr 9000v-v2 Version -
Cisco ≫ Asr 9001 Version -
Cisco ≫ Asr 9006 Version -
Cisco ≫ Asr 9010 Version -
Cisco ≫ Asr 9901 Version -
Cisco ≫ Asr 9902 Version -
Cisco ≫ Asr 9903 Version -
Cisco ≫ Asr 9904 Version -
Cisco ≫ Asr 9906 Version -
Cisco ≫ Asr 9910 Version -
Cisco ≫ Asr 9912 Version -
Cisco ≫ Asr 9922 Version -
Cisco ≫ Asr 9001 Version -
Cisco ≫ Asr 9006 Version -
Cisco ≫ Asr 9010 Version -
Cisco ≫ Asr 9901 Version -
Cisco ≫ Asr 9902 Version -
Cisco ≫ Asr 9903 Version -
Cisco ≫ Asr 9904 Version -
Cisco ≫ Asr 9906 Version -
Cisco ≫ Asr 9910 Version -
Cisco ≫ Asr 9912 Version -
Cisco ≫ Asr 9922 Version -
Cisco ≫ Ios Xr Version >= 6.5.0 < 7.2.2
Cisco ≫ Asr 9000v-v2 Version -
Cisco ≫ Asr 9001 Version -
Cisco ≫ Asr 9006 Version -
Cisco ≫ Asr 9010 Version -
Cisco ≫ Asr 9901 Version -
Cisco ≫ Asr 9902 Version -
Cisco ≫ Asr 9903 Version -
Cisco ≫ Asr 9904 Version -
Cisco ≫ Asr 9906 Version -
Cisco ≫ Asr 9910 Version -
Cisco ≫ Asr 9912 Version -
Cisco ≫ Asr 9922 Version -
Cisco ≫ Asr 9001 Version -
Cisco ≫ Asr 9006 Version -
Cisco ≫ Asr 9010 Version -
Cisco ≫ Asr 9901 Version -
Cisco ≫ Asr 9902 Version -
Cisco ≫ Asr 9903 Version -
Cisco ≫ Asr 9904 Version -
Cisco ≫ Asr 9906 Version -
Cisco ≫ Asr 9910 Version -
Cisco ≫ Asr 9912 Version -
Cisco ≫ Asr 9922 Version -
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.29% | 0.667 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.6 | 3.9 | 4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
|
| NIST | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
| Cisco PSIRT | 8.6 | 3.9 | 4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
|
CWE-771 Missing Reference to Active Allocated Resource
The product does not properly maintain a reference to a resource that has been allocated, which prevents the resource from being reclaimed.
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipsla-ZA3SRrpP