CVE-2024-20313

HIGH Year: 2024
CVSS v3 Score
7.4
High
Weakness Type
CWE-120
View all →

Vulnerability Description

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Related Vulnerabilities

CVE-2019-20758

HIGH
CVSS:7.4(High)

NETGEAR R7000 devices before 1.0.9.42 are affected by a buffer overflow by an authenticated user.

CWE-1202019

CVE-2019-9134

HIGH
CVSS:7.4(High)

Architectural Information System 1.0 and earlier versions have a Stack-based buffer overflow, allows remote attackers to execute arbitrary code.

CWE-1202019

CVE-2020-4609

HIGH
CVSS:7.4(High)

IBM Security Sevret Server (IBM Security Verify Privilege Manager 10.8.2) is vulnerable to a buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and execute a...

CWE-1202020

CVE-2021-1439

HIGH
CVSS:7.4(High)

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) conditio...

CWE-1202021

CVE-2023-52377

HIGH
CVSS:7.4(High)

Vulnerability of input data not being verified in the cellular data module.Successful exploitation of this vulnerability may cause out-of-bounds access.

CWE-1202023

CVE-2012-6122

HIGH
CVSS:7.5(High)

Buffer overflow in the thread scheduler in Chicken before 4.8.0.1 allows attackers to cause a denial of service (crash) by opening a file descriptor with a large integer value.

CWE-1202012