CVE-2024-20464: Input Validation
A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of received IPv4 PIMv2 packets. An attacker could exploit this vulnerability by sending a crafted PIMv2 packet to a PIM-enabled interface on an affected device. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Note: This vulnerability can be exploited with either an IPv4 multicast or unicast packet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-20464?
CVE-2024-20464 has been classified with a high severity due to its potential to cause a denial of service condition.
How do I fix CVE-2024-20464?
To mitigate CVE-2024-20464, upgrade your Cisco IOS XE Software to the latest version where the vulnerability is patched.
What devices are affected by CVE-2024-20464?
CVE-2024-20464 specifically affects Cisco IOS XE Software versions 17.13.1 and 17.13.1a.
Can CVE-2024-20464 be exploited remotely?
Yes, CVE-2024-20464 can be exploited by an unauthenticated, remote attacker.
What is the attack vector for CVE-2024-20464?
The attack vector for CVE-2024-20464 is through insufficient validation of received IPv4 PIMv2 packets.