CVE-2020-3338: Cisco NX-OS Software IPv6 Protocol Independent Multicast Denial of Service Vulnerability
A vulnerability in the Protocol Independent Multicast (PIM) feature for IPv6 networks (PIM6) of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper error handling when processing inbound PIM6 packets. An attacker could exploit this vulnerability by sending multiple crafted PIM6 packets to an affected device. A successful exploit could allow the attacker to cause the PIM6 application to leak system memory. Over time, this memory leak could cause the PIM6 application to stop processing legitimate PIM6 traffic, leading to a DoS condition on the affected device.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Cisco NX-OS Software vulnerability?
The vulnerability ID for this Cisco NX-OS Software vulnerability is CVE-2020-3338.
What is the severity of CVE-2020-3338?
The severity of CVE-2020-3338 is high, with a severity value of 7.5.
What is the affected software for this vulnerability?
The affected software for this vulnerability is Cisco NX-OS Software.
How can an attacker exploit CVE-2020-3338?
An unauthenticated, remote attacker can exploit CVE-2020-3338 to cause a denial of service (DoS) condition on an affected device.
Where can I find more information about CVE-2020-3338?
You can find more information about CVE-2020-3338 in the Cisco Security Advisory.