cisco-sa-ios-dhcpv6-dos-44cMvdDK: Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability

Published Mar 22, 2023

Updated

A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition.This vulnerability is due to insufficient validation of data boundaries. An

Affected Software

2 affected components

cisco IOS

Cisco IOS XE

Event History

Mar 22, 2023

Advisory Published

04:00 PM

Data Sourced

04:00 PM

DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-20080

Frequently Asked Questions

What is the severity of cisco-sa-ios-dhcpv6-dos-44cMvdDK?

The severity of cisco-sa-ios-dhcpv6-dos-44cMvdDK is classified as high due to its potential to trigger a denial of service (DoS) condition.

How do I fix cisco-sa-ios-dhcpv6-dos-44cMvdDK?

To fix cisco-sa-ios-dhcpv6-dos-44cMvdDK, you should upgrade your Cisco IOS or IOS XE Software to the latest version that addresses this vulnerability.

Who is affected by cisco-sa-ios-dhcpv6-dos-44cMvdDK?

Cisco IOS and IOS XE Software users utilizing the DHCPv6 relay and server features are affected by cisco-sa-ios-dhcpv6-dos-44cMvdDK.

What is the cause of cisco-sa-ios-dhcpv6-dos-44cMvdDK?

cisco-sa-ios-dhcpv6-dos-44cMvdDK is caused by insufficient validation of data boundaries in the DHCPv6 relay and server features.

Is cisco-sa-ios-dhcpv6-dos-44cMvdDK remotely exploitable?

Yes, cisco-sa-ios-dhcpv6-dos-44cMvdDK can be exploited by an unauthenticated, remote attacker.