CVE-2024-20259

EPSS 0.5%
Published 27.03.2024 17:15:50
Last modified 30.04.2025 15:19:23
Source psirt@cisco.com
Teams watchlist Login
Open Login

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.

 This vulnerability is due to a crafted IPv4 DHCP request packet being mishandled when endpoint analytics are enabled. An attacker could exploit this vulnerability by sending a crafted DHCP request through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

 Note: The attack vector is listed as network because a DHCP relay anywhere on the network could allow exploits from networks other than the adjacent one.

Affected products Warnungen 0 Metrics 3 CWE 2 References 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Ios Xe Version17.1.1

Cisco ≫ Ios Xe Version17.1.1a

Cisco ≫ Ios Xe Version17.1.1s

Cisco ≫ Ios Xe Version17.1.1t

Cisco ≫ Ios Xe Version17.1.3

Cisco ≫ Ios Xe Version17.2.1

Cisco ≫ Ios Xe Version17.2.1a

Cisco ≫ Ios Xe Version17.2.1r

Cisco ≫ Ios Xe Version17.2.1v

Cisco ≫ Ios Xe Version17.2.2

Cisco ≫ Ios Xe Version17.2.3

Cisco ≫ Ios Xe Version17.3.1

Cisco ≫ Ios Xe Version17.3.1a

Cisco ≫ Ios Xe Version17.3.1w

Cisco ≫ Ios Xe Version17.3.1x

Cisco ≫ Ios Xe Version17.3.1z

Cisco ≫ Ios Xe Version17.3.2

Cisco ≫ Ios Xe Version17.3.2a

Cisco ≫ Ios Xe Version17.3.3

Cisco ≫ Ios Xe Version17.3.4

Cisco ≫ Ios Xe Version17.3.4a

Cisco ≫ Ios Xe Version17.3.4b

Cisco ≫ Ios Xe Version17.3.4c

Cisco ≫ Ios Xe Version17.3.5

Cisco ≫ Ios Xe Version17.3.5a

Cisco ≫ Ios Xe Version17.3.5b

Cisco ≫ Ios Xe Version17.3.6

Cisco ≫ Ios Xe Version17.3.7

Cisco ≫ Ios Xe Version17.3.8

Cisco ≫ Ios Xe Version17.3.8a

Cisco ≫ Ios Xe Version17.4.1

Cisco ≫ Ios Xe Version17.4.1a

Cisco ≫ Ios Xe Version17.4.1b

Cisco ≫ Ios Xe Version17.4.2

Cisco ≫ Ios Xe Version17.4.2a

Cisco ≫ Ios Xe Version17.5.1

Cisco ≫ Ios Xe Version17.5.1a

Cisco ≫ Ios Xe Version17.6.1

Cisco ≫ Ios Xe Version17.6.1a

Cisco ≫ Ios Xe Version17.6.1w

Cisco ≫ Ios Xe Version17.6.1x

Cisco ≫ Ios Xe Version17.6.1y

Cisco ≫ Ios Xe Version17.6.1z

Cisco ≫ Ios Xe Version17.6.1z1

Cisco ≫ Ios Xe Version17.6.2

Cisco ≫ Ios Xe Version17.6.3

Cisco ≫ Ios Xe Version17.6.3a

Cisco ≫ Ios Xe Version17.6.4

Cisco ≫ Ios Xe Version17.6.5

Cisco ≫ Ios Xe Version17.6.5a

Cisco ≫ Ios Xe Version17.6.6

Cisco ≫ Ios Xe Version17.6.6a

Cisco ≫ Ios Xe Version17.7.1

Cisco ≫ Ios Xe Version17.7.1a

Cisco ≫ Ios Xe Version17.7.1b

Cisco ≫ Ios Xe Version17.7.2

Cisco ≫ Ios Xe Version17.8.1

Cisco ≫ Ios Xe Version17.8.1a

Cisco ≫ Ios Xe Version17.9.1

Cisco ≫ Ios Xe Version17.9.1a

Cisco ≫ Ios Xe Version17.9.1w

Cisco ≫ Ios Xe Version17.9.1x

Cisco ≫ Ios Xe Version17.9.1x1

Cisco ≫ Ios Xe Version17.9.1y

Cisco ≫ Ios Xe Version17.9.1y1

Cisco ≫ Ios Xe Version17.9.2

Cisco ≫ Ios Xe Version17.9.2a

Cisco ≫ Ios Xe Version17.9.3

Cisco ≫ Ios Xe Version17.9.3a

Cisco ≫ Ios Xe Version17.9.4

Cisco ≫ Ios Xe Version17.9.4a

Cisco ≫ Ios Xe Version17.10.1

Cisco ≫ Ios Xe Version17.10.1a

Cisco ≫ Ios Xe Version17.10.1b

Cisco ≫ Ios Xe Version17.11.1

Cisco ≫ Ios Xe Version17.11.1a

Cisco ≫ Ios Xe Version17.11.99sw

Cisco ≫ Ios Xe Version17.12.1

Cisco ≫ Ios Xe Version17.12.1a

Cisco ≫ Ios Xe Version17.12.1w

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.5%	0.653

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.6	3.9	4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
psirt@cisco.com	8.6	3.9	4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dhcp-dos-T3CXPO9z

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20259

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20259

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20259

EUVD