CVE-2024-20259

EPSS 0.82%
Veröffentlicht 27.03.2024 17:15:50
Zuletzt bearbeitet 30.04.2025 15:19:23
Erkennungen
Login

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.

 This vulnerability is due to a crafted IPv4 DHCP request packet being mishandled when endpoint analytics are enabled. An attacker could exploit this vulnerability by sending a crafted DHCP request through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

 Note: The attack vector is listed as network because a DHCP relay anywhere on the network could allow exploits from networks other than the adjacent one.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

NVD 80 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Ios Xe Version 17.1.1

   Cisco ≫ Catalyst 9100 Version -
   Cisco ≫ Catalyst 9105 Version -
   Cisco ≫ Catalyst 9105ax Version -
   Cisco ≫ Catalyst 9105axi Version -
   Cisco ≫ Catalyst 9105axw Version -
   Cisco ≫ Catalyst 9105i Version -
   Cisco ≫ Catalyst 9105w Version -
   Cisco ≫ Catalyst 9115 Version -
   Cisco ≫ Catalyst 9115 Ap Version -
   Cisco ≫ Catalyst 9115ax Version -
   Cisco ≫ Catalyst 9115axe Version -
   Cisco ≫ Catalyst 9115axi Version -
   Cisco ≫ Catalyst 9117 Version -
   Cisco ≫ Catalyst 9117 Ap Version -
   Cisco ≫ Catalyst 9117ax Version -
   Cisco ≫ Catalyst 9117axi Version -
   Cisco ≫ Catalyst 9120 Version -
   Cisco ≫ Catalyst 9120 Ap Version -
   Cisco ≫ Catalyst 9120ax Version -
   Cisco ≫ Catalyst 9120axe Version -
   Cisco ≫ Catalyst 9120axi Version -
   Cisco ≫ Catalyst 9120axp Version -
   Cisco ≫ Catalyst 9124 Version -
   Cisco ≫ Catalyst 9124ax Version -
   Cisco ≫ Catalyst 9124axd Version -
   Cisco ≫ Catalyst 9124axi Version -
   Cisco ≫ Catalyst 9124d Version -
   Cisco ≫ Catalyst 9124e Version -
   Cisco ≫ Catalyst 9124i Version -
   Cisco ≫ Catalyst 9130 Version -
   Cisco ≫ Catalyst 9130 Ap Version -
   Cisco ≫ Catalyst 9130ax Version -
   Cisco ≫ Catalyst 9130axe Version -
   Cisco ≫ Catalyst 9130axi Version -
   Cisco ≫ Catalyst 9136 Version -
   Cisco ≫ Catalyst 9162 Version -
   Cisco ≫ Catalyst 9164 Version -
   Cisco ≫ Catalyst 9166 Version -
   Cisco ≫ Catalyst 9166d1 Version -
   Cisco ≫ Catalyst 9200 Version -
   Cisco ≫ Catalyst 9200cx Version -
   Cisco ≫ Catalyst 9200l Version -
   Cisco ≫ Catalyst 9300 Version -
   Cisco ≫ Catalyst 9300-24p-a Version -
   Cisco ≫ Catalyst 9300-24p-e Version -
   Cisco ≫ Catalyst 9300-24s-a Version -
   Cisco ≫ Catalyst 9300-24s-e Version -
   Cisco ≫ Catalyst 9300-24t-a Version -
   Cisco ≫ Catalyst 9300-24t-e Version -
   Cisco ≫ Catalyst 9300-24u-a Version -
   Cisco ≫ Catalyst 9300-24u-e Version -
   Cisco ≫ Catalyst 9300-24ux-a Version -
   Cisco ≫ Catalyst 9300-24ux-e Version -
   Cisco ≫ Catalyst 9300-48p-a Version -
   Cisco ≫ Catalyst 9300-48p-e Version -
   Cisco ≫ Catalyst 9300-48s-a Version -
   Cisco ≫ Catalyst 9300-48s-e Version -
   Cisco ≫ Catalyst 9300-48t-a Version -
   Cisco ≫ Catalyst 9300-48t-e Version -
   Cisco ≫ Catalyst 9300-48u-a Version -
   Cisco ≫ Catalyst 9300-48u-e Version -
   Cisco ≫ Catalyst 9300-48un-a Version -
   Cisco ≫ Catalyst 9300-48un-e Version -
   Cisco ≫ Catalyst 9300-48uxm-a Version -
   Cisco ≫ Catalyst 9300-48uxm-e Version -
   Cisco ≫ Catalyst 9300l Version -
   Cisco ≫ Catalyst 9300l-24p-4g-a Version -
   Cisco ≫ Catalyst 9300l-24p-4g-e Version -
   Cisco ≫ Catalyst 9300l-24p-4x-a Version -
   Cisco ≫ Catalyst 9300l-24p-4x-e Version -
   Cisco ≫ Catalyst 9300l-24t-4g-a Version -
   Cisco ≫ Catalyst 9300l-24t-4g-e Version -
   Cisco ≫ Catalyst 9300l-24t-4x-a Version -
   Cisco ≫ Catalyst 9300l-24t-4x-e Version -
   Cisco ≫ Catalyst 9300l-48p-4g-a Version -
   Cisco ≫ Catalyst 9300l-48p-4g-e Version -
   Cisco ≫ Catalyst 9300l-48p-4x-a Version -
   Cisco ≫ Catalyst 9300l-48p-4x-e Version -
   Cisco ≫ Catalyst 9300l-48t-4g-a Version -
   Cisco ≫ Catalyst 9300l-48t-4g-e Version -
   Cisco ≫ Catalyst 9300l-48t-4x-a Version -
   Cisco ≫ Catalyst 9300l-48t-4x-e Version -
   Cisco ≫ Catalyst 9300l Stack Version -
   Cisco ≫ Catalyst 9300lm Version -
   Cisco ≫ Catalyst 9300x Version -
   Cisco ≫ Catalyst 9400 Version -
   Cisco ≫ Catalyst 9407r Version -
   Cisco ≫ Catalyst 9600x Version -
   Cisco ≫ Catalyst 9800 Version -
   Cisco ≫ Catalyst 9800-40 Version -
   Cisco ≫ Catalyst 9800-80 Version -
   Cisco ≫ Catalyst 9800-cl Version -
   Cisco ≫ Catalyst 9800-l Version -
   Cisco ≫ Catalyst 9800-l-c Version -
   Cisco ≫ Catalyst 9800-l-f Version -
   Cisco ≫ Dn-apl-tta-m Version -
   Cisco ≫ Dn-apl-tta-m-rf Version -

Cisco ≫ Ios Xe Version 17.1.1a

Cisco ≫ Ios Xe Version 17.1.1s

Cisco ≫ Ios Xe Version 17.1.1t

Cisco ≫ Ios Xe Version 17.1.3

Cisco ≫ Ios Xe Version 17.2.1

Cisco ≫ Ios Xe Version 17.2.1a

Cisco ≫ Ios Xe Version 17.2.1r

Cisco ≫ Ios Xe Version 17.2.1v

Cisco ≫ Ios Xe Version 17.2.2

Cisco ≫ Ios Xe Version 17.2.3

Cisco ≫ Ios Xe Version 17.3.1

Cisco ≫ Ios Xe Version 17.3.1a

Cisco ≫ Ios Xe Version 17.3.1w

Cisco ≫ Ios Xe Version 17.3.1x

Cisco ≫ Ios Xe Version 17.3.1z

Cisco ≫ Ios Xe Version 17.3.2

Cisco ≫ Ios Xe Version 17.3.2a

Cisco ≫ Ios Xe Version 17.3.3

Cisco ≫ Ios Xe Version 17.3.4

Cisco ≫ Ios Xe Version 17.3.4a

Cisco ≫ Ios Xe Version 17.3.4b

Cisco ≫ Ios Xe Version 17.3.4c

Cisco ≫ Ios Xe Version 17.3.5

Cisco ≫ Ios Xe Version 17.3.5a

Cisco ≫ Ios Xe Version 17.3.5b

Cisco ≫ Ios Xe Version 17.3.6

Cisco ≫ Ios Xe Version 17.3.7

Cisco ≫ Ios Xe Version 17.3.8

Cisco ≫ Ios Xe Version 17.3.8a

Cisco ≫ Ios Xe Version 17.4.1

Cisco ≫ Ios Xe Version 17.4.1a

Cisco ≫ Ios Xe Version 17.4.1b

Cisco ≫ Ios Xe Version 17.4.2

Cisco ≫ Ios Xe Version 17.4.2a

Cisco ≫ Ios Xe Version 17.5.1

Cisco ≫ Ios Xe Version 17.5.1a

Cisco ≫ Ios Xe Version 17.6.1

Cisco ≫ Ios Xe Version 17.6.1a

Cisco ≫ Ios Xe Version 17.6.1w

Cisco ≫ Ios Xe Version 17.6.1x

Cisco ≫ Ios Xe Version 17.6.1y

Cisco ≫ Ios Xe Version 17.6.1z

Cisco ≫ Ios Xe Version 17.6.1z1

Cisco ≫ Ios Xe Version 17.6.2

Cisco ≫ Ios Xe Version 17.6.3

Cisco ≫ Ios Xe Version 17.6.3a

Cisco ≫ Ios Xe Version 17.6.4

Cisco ≫ Ios Xe Version 17.6.5

Cisco ≫ Ios Xe Version 17.6.5a

Cisco ≫ Ios Xe Version 17.6.6

Cisco ≫ Ios Xe Version 17.6.6a

Cisco ≫ Ios Xe Version 17.7.1

Cisco ≫ Ios Xe Version 17.7.1a

Cisco ≫ Ios Xe Version 17.7.1b

Cisco ≫ Ios Xe Version 17.7.2

Cisco ≫ Ios Xe Version 17.8.1

Cisco ≫ Ios Xe Version 17.8.1a

Cisco ≫ Ios Xe Version 17.9.1

Cisco ≫ Ios Xe Version 17.9.1a

Cisco ≫ Ios Xe Version 17.9.1w

Cisco ≫ Ios Xe Version 17.9.1x

Cisco ≫ Ios Xe Version 17.9.1x1

Cisco ≫ Ios Xe Version 17.9.1y

Cisco ≫ Ios Xe Version 17.9.1y1

Cisco ≫ Ios Xe Version 17.9.2

Cisco ≫ Ios Xe Version 17.9.2a

Cisco ≫ Ios Xe Version 17.9.3

Cisco ≫ Ios Xe Version 17.9.3a

Cisco ≫ Ios Xe Version 17.9.4

Cisco ≫ Ios Xe Version 17.9.4a

Cisco ≫ Ios Xe Version 17.10.1

Cisco ≫ Ios Xe Version 17.10.1a

Cisco ≫ Ios Xe Version 17.10.1b

Cisco ≫ Ios Xe Version 17.11.1

Cisco ≫ Ios Xe Version 17.11.1a

Cisco ≫ Ios Xe Version 17.11.99sw

Cisco ≫ Ios Xe Version 17.12.1

Cisco ≫ Ios Xe Version 17.12.1a

Cisco ≫ Ios Xe Version 17.12.1w

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.82%	0.523

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.6	3.9	4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Cisco PSIRT	8.6	3.9	4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dhcp-dos-T3CXPO9z

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20259

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20259

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20259

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2024-20259