CVE-2024-20321
29.02.2024, 01:43
A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware rate-limiter queue. An attacker could exploit this vulnerability by sending large amounts of network traffic with certain characteristics through an affected device. A successful exploit could allow the attacker to cause eBGP neighbor sessions to be dropped, leading to a DoS condition in the network.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | nx-os | 7.0\(3\)f1\(1\) |
| cisco | nx-os | 7.0\(3\)f2\(1\) |
| cisco | nx-os | 7.0\(3\)f2\(2\) |
| cisco | nx-os | 7.0\(3\)f3\(1\) |
| cisco | nx-os | 7.0\(3\)f3\(2\) |
| cisco | nx-os | 7.0\(3\)f3\(3\) |
| cisco | nx-os | 7.0\(3\)f3\(3a\) |
| cisco | nx-os | 7.0\(3\)f3\(3c\) |
| cisco | nx-os | 7.0\(3\)f3\(4\) |
| cisco | nx-os | 7.0\(3\)f3\(5\) |
| cisco | nx-os | 9.2\(1\) |
| cisco | nx-os | 9.2\(2\) |
| cisco | nx-os | 9.2\(2t\) |
| cisco | nx-os | 9.2\(2v\) |
| cisco | nx-os | 9.2\(3\) |
| cisco | nx-os | 9.2\(4\) |
| cisco | nx-os | 9.3\(1\) |
| cisco | nx-os | 9.3\(2\) |
| cisco | nx-os | 9.3\(3\) |
| cisco | nx-os | 9.3\(4\) |
| cisco | nx-os | 9.3\(5\) |
| cisco | nx-os | 9.3\(6\) |
| cisco | nx-os | 9.3\(7\) |
| cisco | nx-os | 9.3\(7a\) |
| cisco | nx-os | 9.3\(8\) |
| cisco | nx-os | 9.3\(9\) |
| cisco | nx-os | 9.3\(10\) |
| cisco | nx-os | 9.3\(11\) |
| cisco | nx-os | 9.3\(12\) |
| cisco | nx-os | 10.1\(1\) |
| cisco | nx-os | 10.1\(2\) |
| cisco | nx-os | 10.1\(2t\) |
| cisco | nx-os | 10.2\(1\) |
| cisco | nx-os | 10.2\(1q\) |
| cisco | nx-os | 10.2\(2\) |
| cisco | nx-os | 10.2\(3\) |
| cisco | nx-os | 10.2\(3t\) |
| cisco | nx-os | 10.2\(3v\) |
| cisco | nx-os | 10.2\(4\) |
| cisco | nx-os | 10.2\(5\) |
| cisco | nx-os | 10.2\(6\) |
| cisco | nx-os | 10.3\(1\) |
| cisco | nx-os | 10.3\(2\) |
| cisco | nx-os | 10.3\(3\) |
| cisco | nx-os | 10.3\(4a\) |
| cisco | nx-os | 10.3\(99w\) |
| cisco | nx-os | 10.3\(99x\) |
| cisco | nx-os | 10.4\(1\) |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
- CWE-770 - Allocation of Resources Without Limits or ThrottlingThe software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.