CVE-2024-0218: DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticated attacker sending specially crafted malformed network packets to cause the IDS module to stop updating nodes, links, and assets.
Network traffic may not be analyzed until the IDS module is restarted.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0218?
CVE-2024-0218 is a high-severity Denial of Service (DoS) vulnerability that can be exploited by unauthenticated attackers.
How do I fix CVE-2024-0218?
To mitigate CVE-2024-0218, users should upgrade Nozomi Networks Guardian to version 23.4.2 or later.
Which versions of Nozomi Networks Guardian are affected by CVE-2024-0218?
CVE-2024-0218 affects Nozomi Networks Guardian versions up to and including 23.4.1.
Can CVE-2024-0218 be exploited remotely?
Yes, CVE-2024-0218 can be exploited remotely by sending specially crafted malformed network packets.
What type of vulnerability is CVE-2024-0218?
CVE-2024-0218 is classified as a Denial of Service (DoS) vulnerability due to improper input validation.