cisco-sa-JP-DOS-g5FfGm8y: Cisco Catalyst 9200 Series Switches Jumbo Frame Denial of Service Vulnerability
First published: Thu Sep 24 2020(Updated: )
A vulnerability in the Polaris kernel of Cisco Catalyst 9200 Series Switches could allow an unauthenticated, remote attacker to crash the device. The vulnerability is due to insufficient packet size validation. An attacker could exploit this vulnerability by sending jumbo frames or frames larger than the configured MTU size to the management interface of this device. A successful exploit could allow the attacker to crash the device fully before an automatic recovery. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-JP-DOS-g5FfGm8y
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Catalyst 9200 Series |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-JP-DOS-g5FfGm8y?
The severity of cisco-sa-JP-DOS-g5FfGm8y is classified as high due to its potential to crash Cisco Catalyst 9200 Series Switches.
How do I fix cisco-sa-JP-DOS-g5FfGm8y?
To fix cisco-sa-JP-DOS-g5FfGm8y, update your Cisco Catalyst 9200 Series Switches to the latest software version as recommended by Cisco.
What causes the cisco-sa-JP-DOS-g5FfGm8y vulnerability?
The cisco-sa-JP-DOS-g5FfGm8y vulnerability is caused by insufficient packet size validation in the Polaris kernel.
Who is affected by the cisco-sa-JP-DOS-g5FfGm8y vulnerability?
The cisco-sa-JP-DOS-g5FfGm8y vulnerability affects users of Cisco Catalyst 9200 Series Switches.
Can cisco-sa-JP-DOS-g5FfGm8y be exploited remotely?
Yes, cisco-sa-JP-DOS-g5FfGm8y can be exploited remotely by an unauthenticated attacker sending specially crafted packets.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/title
- agent/author
- agent/references
- agent/weakness
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco catalyst 9200 series