Lucene search
HistoryMar 23, 2023 - 5:15 p.m.
CVE-2023-20027
cisco
ios xe
software
ipv4
vfr
dos
vulnerability
cve-2023-20027
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
8.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.4%
A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper reassembly of large packets that occurs when VFR is enabled on either a tunnel interface or on a physical interface that is configured with a maximum transmission unit (MTU) greater than 4,615 bytes. An attacker could exploit this vulnerability by sending fragmented packets through a VFR-enabled interface on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Affected configurations
Node
ciscoios_xeMatch3.9.0as
ORciscoios_xeMatch3.9.1s
ORciscoios_xeMatch3.9.2s
ORciscoios_xeMatch3.10.0s
ORciscoios_xeMatch3.10.1s
ORciscoios_xeMatch3.10.2as
ORciscoios_xeMatch3.10.2s
ORciscoios_xeMatch3.10.2ts
ORciscoios_xeMatch3.10.3s
ORciscoios_xeMatch3.10.4s
ORciscoios_xeMatch3.10.5s
ORciscoios_xeMatch3.10.6s
ORciscoios_xeMatch3.10.7s
ORciscoios_xeMatch3.10.8as
ORciscoios_xeMatch3.10.8s
ORciscoios_xeMatch3.10.9s
ORciscoios_xeMatch3.10.10s
ORciscoios_xeMatch3.11.0s
ORciscoios_xeMatch3.11.1s
ORciscoios_xeMatch3.11.2s
ORciscoios_xeMatch3.11.3s
ORciscoios_xeMatch3.11.4s
ORciscoios_xeMatch3.12.0s
ORciscoios_xeMatch3.12.1s
ORciscoios_xeMatch3.12.2s
ORciscoios_xeMatch3.12.3s
ORciscoios_xeMatch3.12.4s
ORciscoios_xeMatch3.13.0s
ORciscoios_xeMatch3.13.1s
ORciscoios_xeMatch3.13.2s
ORciscoios_xeMatch3.13.3s
ORciscoios_xeMatch3.13.4s
ORciscoios_xeMatch3.13.5s
ORciscoios_xeMatch3.13.6as
ORciscoios_xeMatch3.13.6s
ORciscoios_xeMatch3.13.7s
ORciscoios_xeMatch3.13.8s
ORciscoios_xeMatch3.13.9s
ORciscoios_xeMatch3.13.10s
ORciscoios_xeMatch3.14.0s
ORciscoios_xeMatch3.14.1s
ORciscoios_xeMatch3.14.2s
ORciscoios_xeMatch3.14.3s
ORciscoios_xeMatch3.14.4s
ORciscoios_xeMatch3.15.0s
ORciscoios_xeMatch3.15.1cs
ORciscoios_xeMatch3.15.1s
ORciscoios_xeMatch3.15.2s
ORciscoios_xeMatch3.15.3s
ORciscoios_xeMatch3.15.4s
ORciscoios_xeMatch3.16.0cs
ORciscoios_xeMatch3.16.0s
ORciscoios_xeMatch3.16.1as
ORciscoios_xeMatch3.16.2s
ORciscoios_xeMatch3.16.3s
ORciscoios_xeMatch3.16.4as
ORciscoios_xeMatch3.16.4bs
ORciscoios_xeMatch3.16.4cs
ORciscoios_xeMatch3.16.4ds
ORciscoios_xeMatch3.16.4es
ORciscoios_xeMatch3.16.4gs
ORciscoios_xeMatch3.16.5as
ORciscoios_xeMatch3.16.5bs
ORciscoios_xeMatch3.16.5s
ORciscoios_xeMatch3.16.6bs
ORciscoios_xeMatch3.16.6s
ORciscoios_xeMatch3.16.7as
ORciscoios_xeMatch3.16.7bs
ORciscoios_xeMatch3.16.7s
ORciscoios_xeMatch3.16.8s
ORciscoios_xeMatch3.16.9s
ORciscoios_xeMatch3.16.10s
ORciscoios_xeMatch3.17.0s
ORciscoios_xeMatch3.17.1s
ORciscoios_xeMatch3.17.2s
ORciscoios_xeMatch3.17.3s
ORciscoios_xeMatch3.17.4s
ORciscoios_xeMatch3.18.0as
ORciscoios_xeMatch3.18.2asp
ORciscoios_xeMatch16.2.1
ORciscoios_xeMatch16.2.2
ORciscoios_xeMatch16.3.1
ORciscoios_xeMatch16.3.1a
ORciscoios_xeMatch16.3.2
ORciscoios_xeMatch16.3.3
ORciscoios_xeMatch16.3.4
ORciscoios_xeMatch16.3.5
ORciscoios_xeMatch16.3.6
ORciscoios_xeMatch16.3.7
ORciscoios_xeMatch16.3.8
ORciscoios_xeMatch16.3.9
ORciscoios_xeMatch16.3.10
ORciscoios_xeMatch16.3.11
ORciscoios_xeMatch16.4.1
ORciscoios_xeMatch16.4.2
ORciscoios_xeMatch16.4.3
ORciscoios_xeMatch16.5.1
ORciscoios_xeMatch16.5.1b
ORciscoios_xeMatch16.5.2
ORciscoios_xeMatch16.5.3
ORciscoios_xeMatch16.6.1
ORciscoios_xeMatch16.6.2
ORciscoios_xeMatch16.6.3
ORciscoios_xeMatch16.6.4
ORciscoios_xeMatch16.6.4s
ORciscoios_xeMatch16.6.5
ORciscoios_xeMatch16.6.6
ORciscoios_xeMatch16.6.7
ORciscoios_xeMatch16.6.8
ORciscoios_xeMatch16.6.9
ORciscoios_xeMatch16.6.10
ORciscoios_xeMatch16.7.1
ORciscoios_xeMatch16.7.2
ORciscoios_xeMatch16.7.3
ORciscoios_xeMatch16.8.1
ORciscoios_xeMatch16.8.1s
ORciscoios_xeMatch16.8.2
ORciscoios_xeMatch16.8.3
ORciscoios_xeMatch16.9.1
ORciscoios_xeMatch16.9.1s
ORciscoios_xeMatch16.9.2
ORciscoios_xeMatch16.9.2s
ORciscoios_xeMatch16.9.3
ORciscoios_xeMatch16.9.3s
ORciscoios_xeMatch16.9.4
ORciscoios_xeMatch16.9.5
ORciscoios_xeMatch16.9.6
ORciscoios_xeMatch16.9.7
ORciscoios_xeMatch16.9.8
ORciscoios_xeMatch16.9.8a
ORciscoios_xeMatch16.9.8c
ORciscoios_xeMatch16.10.1
ORciscoios_xeMatch16.10.1a
ORciscoios_xeMatch16.10.1b
ORciscoios_xeMatch16.10.1e
ORciscoios_xeMatch16.10.1s
ORciscoios_xeMatch16.10.2
ORciscoios_xeMatch16.10.3
ORciscoios_xeMatch16.11.1
ORciscoios_xeMatch16.11.1a
ORciscoios_xeMatch16.11.1c
ORciscoios_xeMatch16.11.1s
ORciscoios_xeMatch16.11.2
ORciscoios_xeMatch16.12.1
ORciscoios_xeMatch16.12.1a
ORciscoios_xeMatch16.12.1c
ORciscoios_xeMatch16.12.1s
ORciscoios_xeMatch16.12.2
ORciscoios_xeMatch16.12.2s
ORciscoios_xeMatch16.12.2t
ORciscoios_xeMatch16.12.3
ORciscoios_xeMatch16.12.3s
ORciscoios_xeMatch16.12.4
ORciscoios_xeMatch16.12.5
ORciscoios_xeMatch16.12.6
ORciscoios_xeMatch16.12.7
ORciscoios_xeMatch16.12.8
ORciscoios_xeMatch17.1.1
ORciscoios_xeMatch17.1.1s
ORciscoios_xeMatch17.1.1t
ORciscoios_xeMatch17.1.2
ORciscoios_xeMatch17.1.3
ORciscoios_xeMatch17.2.1
ORciscoios_xeMatch17.2.1r
ORciscoios_xeMatch17.2.1v
ORciscoios_xeMatch17.2.2
ORciscoios_xeMatch17.2.3
ORciscoios_xeMatch17.3.1
ORciscoios_xeMatch17.3.1a
ORciscoios_xeMatch17.3.2
ORciscoios_xeMatch17.3.3
ORciscoios_xeMatch17.3.4
ORciscoios_xeMatch17.3.4a
ORciscoios_xeMatch17.3.5
ORciscoios_xeMatch17.4.1
ORciscoios_xeMatch17.4.1a
ORciscoios_xeMatch17.4.1b
ORciscoios_xeMatch17.4.2
ORciscoios_xeMatch17.5.1
ORciscoios_xeMatch17.5.1a
ORciscoios_xeMatch17.6.1
ORciscoios_xeMatch17.6.1a
ORciscoios_xeMatch17.6.2
ORciscoios_xeMatch17.6.3
ORciscoios_xeMatch17.6.3a
ORciscoios_xeMatch17.7.1
ORciscoios_xeMatch17.7.1a
ORciscoios_xeMatch17.7.2
ORciscoios_xeMatch17.8.1
ORciscoios_xeMatch17.8.1a
ciscocatalyst_8000v_edgeMatch-
ORciscocloud_services_router_1000vMatch-
ORcisco1000_integrated_services_routerMatch-
ORcisco1100-4g\/6g_integrated_services_routerMatch-
ORcisco1100-4g_integrated_services_routerMatch-
ORcisco1100-4p_integrated_services_routerMatch-
ORcisco1100-6g_integrated_services_routerMatch-
ORcisco1100-8p_integrated_services_routerMatch-
ORcisco1100_integrated_services_routerMatch-
ORcisco1101-4p_integrated_services_routerMatch-
ORcisco1101_integrated_services_routerMatch-
ORcisco1109-2p_integrated_services_routerMatch-
ORcisco1109-4p_integrated_services_routerMatch-
ORcisco1109_integrated_services_routerMatch-
ORcisco1111x-8p_integrated_services_routerMatch-
ORcisco1111x_integrated_services_routerMatch-
ORcisco111x_integrated_services_routerMatch-
ORcisco1120_integrated_services_routerMatch-
ORcisco1131_integrated_services_routerMatch-
ORcisco1160_integrated_services_routerMatch-
ORcisco4221_integrated_services_routerMatch-
ORcisco4321_integrated_services_routerMatch-
ORcisco4331_integrated_services_routerMatch-
ORcisco4351_integrated_services_routerMatch-
ORcisco4431_integrated_services_routerMatch-
ORcisco4451-x_integrated_services_routerMatch-
ORcisco4461_integrated_services_routerMatch-
ORciscoc8200-1n-4tMatch-
ORciscoc8200l-1n-4tMatch-
ORciscoc8500l-8s4xMatch-
ORciscocatalyst_8300-1n1s-4t2xMatch-
ORciscocatalyst_8300-1n1s-6tMatch-
ORciscocatalyst_8300-2n2s-4t2xMatch-
ORciscocatalyst_8300-2n2s-6tMatch-
CNA Affected
[
{
"vendor": "Cisco",
"product": "Cisco IOS XE Software ",
"versions": [
{
"version": "n/a",
"status": "affected"
}
]
}
]Related
prion
prion
Input validation
2023-03-23 17:15:00
nvd
nvd
CVE-2023-20027
2023-03-23 17:15:13
cvelist
cvelist
cisco
cisco
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
8.3 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.4%
Related for CVE-2023-20027