CVE-2020-3338CWE-404

Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability

High · published August 27, 2020

CVSS v3.0
7.5
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper error handling when processing inbound PIM6 packets. An attacker could exploit this vulnerability by sending multiple crafted PIM6 packets to an affected device. A successful exploit could allow the attacker to cause the PIM6 application to leak system memory. Over time, this memory leak could cause the PIM6 application to stop processing legitimate PIM6 traffic, leading to a DoS condition on the affected device.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01781 · 78.1th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2020-08-27T15:40Z
EPSS history
Timeline
  • 27 AUG 15:40Z
    Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability
    cvelistv5