Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2024-20446

Cisco NX-OS Software DHCPv6 Relay Agent Denial of Service Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the DHCPv6 relay agent of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper handling of specific fields in a DHCPv6 RELAY-REPLY message. An attacker could exploit this vulnerability by sending a crafted DHCPv6 packet to any IPv6 address that is configured on an affected device. A successful exploit could allow the attacker to cause the dhcp_snoop process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco NX-OS Software

Default version status: unknown

  • 10.2(1)affected
  • 10.2(1q)affected
  • 9.3(9)affected
  • 8.2(11)affected

References