What is the severity of CVE-2024-20308?

CVE-2024-20308 is considered critical as it can lead to device reloads due to heap underflows.

How can I fix CVE-2024-20308?

To mitigate CVE-2024-20308, users should update their Cisco IOS and IOS XE Software to the latest versions provided by Cisco.

Which Cisco products are affected by CVE-2024-20308?

CVE-2024-20308 affects Cisco IOS Software and Cisco IOS XE Software.

Can CVE-2024-20308 be exploited remotely?

Yes, CVE-2024-20308 allows unauthenticated, remote attackers to exploit the vulnerability.

What kind of attack does CVE-2024-20308 enable?

CVE-2024-20308 enables attackers to cause a heap underflow by sending crafted, fragmented IKEv1 packets.

Vulnerability/
CVE-2024-20308

high

8.6

CWE

787

27/3/2024

26/11/2024

CVE-2024-20308

First published: Wed Mar 27 2024(Updated: )

A vulnerability in the IKEv1 fragmentation code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a heap underflow, resulting in an affected device reloading. This vulnerability exists because crafted, fragmented IKEv1 packets are not properly reassembled. An attacker could exploit this vulnerability by sending crafted UDP packets to an affected system. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. Note: Only traffic that is directed to the affected system can be used to exploit this vulnerability. This vulnerability can be triggered by IPv4 and IPv6 traffic..

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco IOS
Cisco IOS XE

Never miss a vulnerability like this again

Reference Links

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ikev1-NO2ccFWz

Frequently Asked Questions

What is the severity of CVE-2024-20308?
CVE-2024-20308 is considered critical as it can lead to device reloads due to heap underflows.
How can I fix CVE-2024-20308?
To mitigate CVE-2024-20308, users should update their Cisco IOS and IOS XE Software to the latest versions provided by Cisco.
Which Cisco products are affected by CVE-2024-20308?
CVE-2024-20308 affects Cisco IOS Software and Cisco IOS XE Software.
Can CVE-2024-20308 be exploited remotely?
Yes, CVE-2024-20308 allows unauthenticated, remote attackers to exploit the vulnerability.
What kind of attack does CVE-2024-20308 enable?
CVE-2024-20308 enables attackers to cause a heap underflow by sending crafted, fragmented IKEv1 packets.

agent/references
agent/type
agent/description
agent/first-publish-date
agent/severity
agent/author
collector/nvd-api
source/NVD
agent/weakness
agent/event
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/source
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/cisco
canonical/cisco ios
canonical/cisco ios xe

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.