Vulnerability-Lookup

BDU:2024-02634

Vulnerability from fstec - Published: 27.03.2024

Title

Уязвимость функции multicast DNS (mDNS) gateway операционных систем Cisco IOS XE беспроводных контроллеров Catalyst серии 9800, позволяющая нарушителю вызвать отказ в обслуживании

Description

Уязвимость функции multicast DNS (mDNS) gateway операционных систем Cisco IOS XE беспроводных контроллеров Catalyst серии 9800 связана с неполной очисткой временных или вспомогательных ресурсов при обработке записей клиента mDNS. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании путем отправки специально сформированных пакетов mDNS

Severity ?


                    
                      AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Vendor

Cisco Systems Inc.

Software Name

Cisco IOS XE

Software Version

17.3.1 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.2a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 17.3.4c (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 17.10.1b (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.9.1w (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.1a (Cisco IOS XE), 17.9.1x (Cisco IOS XE), 17.9.1y (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.9.1x1 (Cisco IOS XE), 17.2 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.2.1r (Cisco IOS XE), 17.2.1a (Cisco IOS XE), 17.2.1v (Cisco IOS XE), 17.2.2 (Cisco IOS XE), 17.2.3 (Cisco IOS XE), 17.3 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.1a (Cisco IOS XE), 17.3.1w (Cisco IOS XE), 17.3.1x (Cisco IOS XE), 17.3.1z (Cisco IOS XE), 17.3.3a (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.4a (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.4b (Cisco IOS XE), 17.3.5a (Cisco IOS XE), 17.3.5b (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4 (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.4.1a (Cisco IOS XE), 17.4.1b (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2a (Cisco IOS XE), 17.11SW (Cisco IOS XE), 17.11.99SW (Cisco IOS XE), 17.11 (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.10 (Cisco IOS XE), 17.8 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.8.1a (Cisco IOS XE), 17.5 (Cisco IOS XE), 17.5.1a (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.6 (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.1w (Cisco IOS XE), 17.6.1a (Cisco IOS XE), 17.6.1x (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.1y (Cisco IOS XE), 17.6.1z (Cisco IOS XE), 17.6.3a (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.1z1 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.7 (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.7.1a (Cisco IOS XE), 17.7.1b (Cisco IOS XE), 17.7.2 (Cisco IOS XE), 17.9.1y1 (Cisco IOS XE), 17.9.3a (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9 (Cisco IOS XE)

Possible Mitigations

Использование рекомендаций: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf

Reference

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf

CWE

CWE-459

JSON

To clipboard

{
  "CVSS 2.0": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "17.3.1 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.2a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 17.3.4c (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 17.10.1b (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.9.1w (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.1a (Cisco IOS XE), 17.9.1x (Cisco IOS XE), 17.9.1y (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.9.1x1 (Cisco IOS XE), 17.2 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.2.1r (Cisco IOS XE), 17.2.1a (Cisco IOS XE), 17.2.1v (Cisco IOS XE), 17.2.2 (Cisco IOS XE), 17.2.3 (Cisco IOS XE), 17.3 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.1a (Cisco IOS XE), 17.3.1w (Cisco IOS XE), 17.3.1x (Cisco IOS XE), 17.3.1z (Cisco IOS XE), 17.3.3a (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.4a (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.4b (Cisco IOS XE), 17.3.5a (Cisco IOS XE), 17.3.5b (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4 (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.4.1a (Cisco IOS XE), 17.4.1b (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2a (Cisco IOS XE), 17.11SW (Cisco IOS XE), 17.11.99SW (Cisco IOS XE), 17.11 (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.10 (Cisco IOS XE), 17.8 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.8.1a (Cisco IOS XE), 17.5 (Cisco IOS XE), 17.5.1a (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.6 (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.1w (Cisco IOS XE), 17.6.1a (Cisco IOS XE), 17.6.1x (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.1y (Cisco IOS XE), 17.6.1z (Cisco IOS XE), 17.6.3a (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.1z1 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.7 (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.7.1a (Cisco IOS XE), 17.7.1b (Cisco IOS XE), 17.7.2 (Cisco IOS XE), 17.9.1y1 (Cisco IOS XE), 17.9.3a (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9 (Cisco IOS XE)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "27.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "05.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02634",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-20303",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco IOS XE",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Cisco Systems Inc. Cisco IOS XE 17.3.1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.2 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.2a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.4.1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.5.1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.4c Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.10.1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.10.1a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.10.1b Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.1w Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.2 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.1a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.1x Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.1y Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.2a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.1x1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.2 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.2 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.2.1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.2.1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.2.1r Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.2.1r Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.2.1a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.2.1a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.2.1v Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.2.1v Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.2.2 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.2.2 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.2.3 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.2.3 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.2 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.3 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.3 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.1a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.1a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.1w Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.1w Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.2a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.1x Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.1x Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.1z Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.1z Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.3a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.3a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.4 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.4 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.5 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.5 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.4a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.4a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.6 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.6 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.4b Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.4b Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.4c Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.5a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.5a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.5b Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.5b Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.7 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.7 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.8 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.8 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.3.8a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.3.8a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.4 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.4 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.4.1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.4.2 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.4.2 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.4.1a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.4.1a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.4.1b Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.4.1b Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.4.1c Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.4.1c Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.4.2a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.4.2a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.11SW Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.11SW Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.11.99SW Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.11.99SW Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.11 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.11 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.11.1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.11.1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.11.1a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.11.1a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.10 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.10 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.10.1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.10.1a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.10.1b Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.8 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.8 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.8.1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.8.1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.8.1a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.8.1a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.5 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.5 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.5.1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.5.1a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.5.1a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.5.1b Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.5.1b Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.5.1c Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.5.1c Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.2 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.2 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.1w Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.1w Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.1a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.1a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.1x Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.1x Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.3 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.3 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.1y Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.1y Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.1z Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.1z Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.3a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.3a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.4 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.4 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.1z1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.1z1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.5 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.5 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.6.5a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.6.5a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.7 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.7 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.7.1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.7.1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.7.1a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.7.1a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.7.1b Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.7.1b Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.7.2 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.7.2 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.1y1 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.1y1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.3a Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.3a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.1x1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.2a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.3 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9.3 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.1y Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.1x Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.1a Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.2 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.1w Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9.1 Catalyst 9800 Wireless Controllers, Cisco Systems Inc. Cisco IOS XE 17.9 Catalyst 9800-CL Wireless Controllers for Cloud, Cisco Systems Inc. Cisco IOS XE 17.9 Catalyst 9800 Wireless Controllers",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 multicast DNS (mDNS) gateway \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432  Catalyst \u0441\u0435\u0440\u0438\u0438 9800, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u043e\u043b\u043d\u0430\u044f \u043e\u0447\u0438\u0441\u0442\u043a\u0430 (CWE-459)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 multicast DNS (mDNS) gateway \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432  Catalyst \u0441\u0435\u0440\u0438\u0438 9800 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u043e\u043b\u043d\u043e\u0439 \u043e\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 mDNS. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 mDNS",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-459",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,1)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,4)"
}

CVE-2024-20303 (GCVE-0-2024-20303)

Vulnerability from cvelistv5 – Published: 2024-03-27 17:00 – Updated: 2024-08-01 21:59

Summary

A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper management of mDNS client entries. An attacker could exploit this vulnerability by connecting to the wireless network and sending a continuous stream of specific mDNS packets. A successful exploit could allow the attacker to cause the wireless controller to have high CPU utilization, which could lead to access points (APs) losing their connection to the controller and result in a DoS condition.

Severity ?

7.4 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE

CWE-459 - Incomplete Cleanup

Assigner

cisco

References

URL

Tags

https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

	Vendor	Product	Version
	Cisco	Cisco IOS XE Software	Affected: 17.2.1 Affected: 17.2.1r Affected: 17.2.1a Affected: 17.2.1v Affected: 17.2.2 Affected: 17.2.3 Affected: 17.3.1 Affected: 17.3.2 Affected: 17.3.3 Affected: 17.3.1a Affected: 17.3.1w Affected: 17.3.2a Affected: 17.3.1x Affected: 17.3.1z Affected: 17.3.4 Affected: 17.3.5 Affected: 17.3.4a Affected: 17.3.6 Affected: 17.3.4b Affected: 17.3.4c Affected: 17.3.5a Affected: 17.3.5b Affected: 17.3.7 Affected: 17.3.8 Affected: 17.3.8a Affected: 17.4.1 Affected: 17.4.2 Affected: 17.4.1a Affected: 17.4.1b Affected: 17.4.2a Affected: 17.5.1 Affected: 17.5.1a Affected: 17.6.1 Affected: 17.6.2 Affected: 17.6.1w Affected: 17.6.1a Affected: 17.6.1x Affected: 17.6.3 Affected: 17.6.1y Affected: 17.6.1z Affected: 17.6.3a Affected: 17.6.4 Affected: 17.6.1z1 Affected: 17.6.5 Affected: 17.6.5a Affected: 17.7.1 Affected: 17.7.1a Affected: 17.7.1b Affected: 17.7.2 Affected: 17.10.1 Affected: 17.10.1a Affected: 17.10.1b Affected: 17.8.1 Affected: 17.8.1a Affected: 17.9.1 Affected: 17.9.1w Affected: 17.9.2 Affected: 17.9.1a Affected: 17.9.1x Affected: 17.9.1y Affected: 17.9.3 Affected: 17.9.2a Affected: 17.9.1x1 Affected: 17.9.3a Affected: 17.9.1y1 Affected: 17.11.1 Affected: 17.11.1a Affected: 17.11.99SW

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20303",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-28T18:34:54.816642Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:39:55.892Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:41.376Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-wlc-mdns-dos-4hv6pBGf",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco IOS XE Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "17.2.1"
            },
            {
              "status": "affected",
              "version": "17.2.1r"
            },
            {
              "status": "affected",
              "version": "17.2.1a"
            },
            {
              "status": "affected",
              "version": "17.2.1v"
            },
            {
              "status": "affected",
              "version": "17.2.2"
            },
            {
              "status": "affected",
              "version": "17.2.3"
            },
            {
              "status": "affected",
              "version": "17.3.1"
            },
            {
              "status": "affected",
              "version": "17.3.2"
            },
            {
              "status": "affected",
              "version": "17.3.3"
            },
            {
              "status": "affected",
              "version": "17.3.1a"
            },
            {
              "status": "affected",
              "version": "17.3.1w"
            },
            {
              "status": "affected",
              "version": "17.3.2a"
            },
            {
              "status": "affected",
              "version": "17.3.1x"
            },
            {
              "status": "affected",
              "version": "17.3.1z"
            },
            {
              "status": "affected",
              "version": "17.3.4"
            },
            {
              "status": "affected",
              "version": "17.3.5"
            },
            {
              "status": "affected",
              "version": "17.3.4a"
            },
            {
              "status": "affected",
              "version": "17.3.6"
            },
            {
              "status": "affected",
              "version": "17.3.4b"
            },
            {
              "status": "affected",
              "version": "17.3.4c"
            },
            {
              "status": "affected",
              "version": "17.3.5a"
            },
            {
              "status": "affected",
              "version": "17.3.5b"
            },
            {
              "status": "affected",
              "version": "17.3.7"
            },
            {
              "status": "affected",
              "version": "17.3.8"
            },
            {
              "status": "affected",
              "version": "17.3.8a"
            },
            {
              "status": "affected",
              "version": "17.4.1"
            },
            {
              "status": "affected",
              "version": "17.4.2"
            },
            {
              "status": "affected",
              "version": "17.4.1a"
            },
            {
              "status": "affected",
              "version": "17.4.1b"
            },
            {
              "status": "affected",
              "version": "17.4.2a"
            },
            {
              "status": "affected",
              "version": "17.5.1"
            },
            {
              "status": "affected",
              "version": "17.5.1a"
            },
            {
              "status": "affected",
              "version": "17.6.1"
            },
            {
              "status": "affected",
              "version": "17.6.2"
            },
            {
              "status": "affected",
              "version": "17.6.1w"
            },
            {
              "status": "affected",
              "version": "17.6.1a"
            },
            {
              "status": "affected",
              "version": "17.6.1x"
            },
            {
              "status": "affected",
              "version": "17.6.3"
            },
            {
              "status": "affected",
              "version": "17.6.1y"
            },
            {
              "status": "affected",
              "version": "17.6.1z"
            },
            {
              "status": "affected",
              "version": "17.6.3a"
            },
            {
              "status": "affected",
              "version": "17.6.4"
            },
            {
              "status": "affected",
              "version": "17.6.1z1"
            },
            {
              "status": "affected",
              "version": "17.6.5"
            },
            {
              "status": "affected",
              "version": "17.6.5a"
            },
            {
              "status": "affected",
              "version": "17.7.1"
            },
            {
              "status": "affected",
              "version": "17.7.1a"
            },
            {
              "status": "affected",
              "version": "17.7.1b"
            },
            {
              "status": "affected",
              "version": "17.7.2"
            },
            {
              "status": "affected",
              "version": "17.10.1"
            },
            {
              "status": "affected",
              "version": "17.10.1a"
            },
            {
              "status": "affected",
              "version": "17.10.1b"
            },
            {
              "status": "affected",
              "version": "17.8.1"
            },
            {
              "status": "affected",
              "version": "17.8.1a"
            },
            {
              "status": "affected",
              "version": "17.9.1"
            },
            {
              "status": "affected",
              "version": "17.9.1w"
            },
            {
              "status": "affected",
              "version": "17.9.2"
            },
            {
              "status": "affected",
              "version": "17.9.1a"
            },
            {
              "status": "affected",
              "version": "17.9.1x"
            },
            {
              "status": "affected",
              "version": "17.9.1y"
            },
            {
              "status": "affected",
              "version": "17.9.3"
            },
            {
              "status": "affected",
              "version": "17.9.2a"
            },
            {
              "status": "affected",
              "version": "17.9.1x1"
            },
            {
              "status": "affected",
              "version": "17.9.3a"
            },
            {
              "status": "affected",
              "version": "17.9.1y1"
            },
            {
              "status": "affected",
              "version": "17.11.1"
            },
            {
              "status": "affected",
              "version": "17.11.1a"
            },
            {
              "status": "affected",
              "version": "17.11.99SW"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.\r\n\r This vulnerability is due to improper management of mDNS client entries. An attacker could exploit this vulnerability by connecting to the wireless network and sending a continuous stream of specific mDNS packets. A successful exploit could allow the attacker to cause the wireless controller to have high CPU utilization, which could lead to access points (APs) losing their connection to the controller and result in a DoS condition."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-459",
              "description": "Incomplete Cleanup",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-27T17:00:37.075Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-wlc-mdns-dos-4hv6pBGf",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-mdns-dos-4hv6pBGf"
        }
      ],
      "source": {
        "advisory": "cisco-sa-wlc-mdns-dos-4hv6pBGf",
        "defects": [
          "CSCwf53124"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20303",
    "datePublished": "2024-03-27T17:00:37.075Z",
    "dateReserved": "2023-11-08T15:08:07.630Z",
    "dateUpdated": "2024-08-01T21:59:41.376Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

BDU:2024-02634

CVE-2024-20303 (GCVE-0-2024-20303)

Tags

Sightings

Nomenclature