What is CVE-2023-20072?

CVE-2023-20072 is a vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software, which could allow an unauthenticated attacker to cause a denial of service (DoS) by forcing the system to reload.

How does CVE-2023-20072 affect Cisco IOS XE Software?

CVE-2023-20072 affects Cisco IOS XE Software version 17.9.1, 17.9.1a, and 17.9.1w.

What is the severity of CVE-2023-20072?

CVE-2023-20072 has a severity rating of 8.6 (high).

How can an attacker exploit CVE-2023-20072?

An unauthenticated attacker can exploit CVE-2023-20072 by sending specially crafted tunnel protocol packets, causing the affected system to reload and resulting in a denial of service (DoS) condition.

Is there a patch available for CVE-2023-20072?

Cisco has released patches to address the vulnerability. It is recommended to update to a fixed version of Cisco IOS XE Software.

Vulnerability/
CVE-2023-20072

high

8.6

CWE

23/3/2023

31/3/2023

CVE-2023-20072: Input Validation

First published: Thu Mar 23 2023(Updated: )

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of large fragmented tunnel protocol packets. One example of a tunnel protocol is Generic Routing Encapsulation (GRE). An attacker could exploit this vulnerability by sending crafted fragmented packets to an affected system. A successful exploit could allow the attacker to cause the affected system to reload, resulting in a DoS condition. Note: Only traffic directed to the affected system can be used to exploit this vulnerability.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco IOS XE	=17.9.1
Cisco IOS XE	=17.9.1a
Cisco IOS XE	=17.9.1w

Never miss a vulnerability like this again

Reference Links

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-gre-crash-p6nE5Sq5

Frequently Asked Questions

What is CVE-2023-20072?
CVE-2023-20072 is a vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software, which could allow an unauthenticated attacker to cause a denial of service (DoS) by forcing the system to reload.
How does CVE-2023-20072 affect Cisco IOS XE Software?
CVE-2023-20072 affects Cisco IOS XE Software version 17.9.1, 17.9.1a, and 17.9.1w.
What is the severity of CVE-2023-20072?
CVE-2023-20072 has a severity rating of 8.6 (high).
How can an attacker exploit CVE-2023-20072?
An unauthenticated attacker can exploit CVE-2023-20072 by sending specially crafted tunnel protocol packets, causing the affected system to reload and resulting in a denial of service (DoS) condition.
Is there a patch available for CVE-2023-20072?
Cisco has released patches to address the vulnerability. It is recommended to update to a fixed version of Cisco IOS XE Software.

agent/author
agent/description
agent/event
agent/first-publish-date
agent/last-modified-date
agent/references
agent/severity
agent/softwarecombine
agent/tags
agent/type
agent/weakness
collector/nvd-index
vendor/cisco
canonical/cisco ios xe
version/cisco ios xe/17.9.1
version/cisco ios xe/17.9.1a
version/cisco ios xe/17.9.1w

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.