CVE-2024-23814CWE-400

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted…

Medium · published February 11, 2025

CVSS v4.0
6.9
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted messages targeting IP fragment re-assembly. This could allow an unauthenticated remote attacker to cause a temporary denial of service condition of the ICMP service, other communication services are not affected. Affected devices will resume normal operation after the attack terminates.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00621 · 49.1th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2025-02-11T10:28Z
EPSS history
Timeline
  • 11 FEB 10:28Z
    The integrated ICMP service of the network stack of affected devices can be forced to exhaust its available memory resources when receiving specially crafted…
    cvelistv5