CVE-2020-3566—Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

漏洞名称

Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability

描述

Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2020-3566

相关 CWE

• CWE-400