A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper reassembly of large packets that occurs when VFR is enabled on either a tunnel interface or on a physical interface that is configured with a maximum transmission unit (MTU) greater than 4,615 bytes. An attacker could exploit this vulnerability by sending fragmented packets through a VFR-enabled interface on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
References
Link | Resource |
---|---|
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv4-vfr-dos-CXxtFacb | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2023-03-23 17:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-20027
Mitre link : CVE-2023-20027
CVE.ORG link : CVE-2023-20027
JSON object : View
Products Affected
cisco
- 1100-4p_integrated_services_router
- 4351_integrated_services_router
- 1131_integrated_services_router
- 4451-x_integrated_services_router
- 1100-6g_integrated_services_router
- 4331_integrated_services_router
- catalyst_8300-2n2s-6t
- 111x_integrated_services_router
- 1101_integrated_services_router
- c8200l-1n-4t
- 1109-2p_integrated_services_router
- catalyst_8300-2n2s-4t2x
- 1100-4g\/6g_integrated_services_router
- ios_xe
- 1120_integrated_services_router
- 1109_integrated_services_router
- 4431_integrated_services_router
- cloud_services_router_1000v
- 4321_integrated_services_router
- 1100-8p_integrated_services_router
- 1111x-8p_integrated_services_router
- 1111x_integrated_services_router
- 4461_integrated_services_router
- catalyst_8300-1n1s-6t
- 1100-4g_integrated_services_router
- c8500l-8s4x
- 1109-4p_integrated_services_router
- 1160_integrated_services_router
- catalyst_8300-1n1s-4t2x
- 1000_integrated_services_router
- 4221_integrated_services_router
- c8200-1n-4t
- 1101-4p_integrated_services_router
- 1100_integrated_services_router
- catalyst_8000v_edge
CWE