Vulnerabilities > CVE-2023-20027 - Unspecified vulnerability in Cisco IOS XE

CVSS 8.6 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

cisco

NVD

Published: 2023-03-23

Updated: 2023-11-07

Summary

A vulnerability in the implementation of the IPv4 Virtual Fragmentation Reassembly (VFR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper reassembly of large packets that occurs when VFR is enabled on either a tunnel interface or on a physical interface that is configured with a maximum transmission unit (MTU) greater than 4,615 bytes. An attacker could exploit this vulnerability by sending fragmented packets through a VFR-enabled interface on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XE 3.9.0As Cisco IOS XE 3.9.1S Cisco IOS XE 3.9.2S Cisco IOS XE 3.10.0S Cisco IOS XE 3.10.1S Cisco IOS XE 3.10.2As Cisco IOS XE 3.10.2S Cisco IOS XE 3.10.2Ts Cisco IOS XE 3.10.3S Cisco IOS XE 3.10.4S Cisco IOS XE 3.10.5S Cisco IOS XE 3.10.6S Cisco IOS XE 3.10.7S Cisco IOS XE 3.10.8As Cisco IOS XE 3.10.8S Cisco IOS XE 3.10.9S Cisco IOS XE 3.10.10S Cisco IOS XE 3.11.0S Cisco IOS XE 3.11.1S Cisco IOS XE 3.11.2S Cisco IOS XE 3.11.3S Cisco IOS XE 3.11.4S Cisco IOS XE 3.12.0S Cisco IOS XE 3.12.1S Cisco IOS XE 3.12.2S Cisco IOS XE 3.12.3S Cisco IOS XE 3.12.4S Cisco IOS XE 3.13.0S Cisco IOS XE 3.13.1S Cisco IOS XE 3.13.2S Cisco IOS XE 3.13.3S Cisco IOS XE 3.13.4S Cisco IOS XE 3.13.5S Cisco IOS XE 3.13.6As Cisco IOS XE 3.13.6S Cisco IOS XE 3.13.7S Cisco IOS XE 3.13.8S Cisco IOS XE 3.13.9S Cisco IOS XE 3.13.10S Cisco IOS XE 3.14.0S Cisco IOS XE 3.14.1S Cisco IOS XE 3.14.2S Cisco IOS XE 3.14.3S Cisco IOS XE 3.14.4S Cisco IOS XE 3.15.0S Cisco IOS XE 3.15.1Cs Cisco IOS XE 3.15.1S Cisco IOS XE 3.15.2S Cisco IOS XE 3.15.3S Cisco IOS XE 3.15.4S Cisco IOS XE 3.16.0Cs Cisco IOS XE 3.16.0S Cisco IOS XE 3.16.1As Cisco IOS XE 3.16.2S Cisco IOS XE 3.16.3S Cisco IOS XE 3.16.4As Cisco IOS XE 3.16.4Bs Cisco IOS XE 3.16.4Cs Cisco IOS XE 3.16.4Ds Cisco IOS XE 3.16.4Es Cisco IOS XE 3.16.4Gs Cisco IOS XE 3.16.5As Cisco IOS XE 3.16.5Bs Cisco IOS XE 3.16.5S Cisco IOS XE 3.16.6Bs Cisco IOS XE 3.16.6S Cisco IOS XE 3.16.7As Cisco IOS XE 3.16.7Bs Cisco IOS XE 3.16.7S Cisco IOS XE 3.16.8S Cisco IOS XE 3.16.9S Cisco IOS XE 3.16.10S Cisco IOS XE 3.17.0S Cisco IOS XE 3.17.1S Cisco IOS XE 3.17.2S Cisco IOS XE 3.17.3S Cisco IOS XE 3.17.4S Cisco IOS XE 3.18.0As Cisco IOS XE 3.18.2Asp Cisco IOS XE 16.2.1 Cisco IOS XE 16.2.2 Cisco IOS XE 16.3.1 Cisco IOS XE 16.3.1A Cisco IOS XE 16.3.2 Cisco IOS XE 16.3.3 Cisco IOS XE 16.3.4 Cisco IOS XE 16.3.5 Cisco IOS XE 16.3.6 Cisco IOS XE 16.3.7 Cisco IOS XE 16.3.8 Cisco IOS XE 16.3.9 Cisco IOS XE 16.3.10 Cisco IOS XE 16.3.11 Cisco IOS XE 16.4.1 Cisco IOS XE 16.4.2 Cisco IOS XE 16.4.3 Cisco IOS XE 16.5.1 Cisco IOS XE 16.5.1B Cisco IOS XE 16.5.2 Cisco IOS XE 16.5.3 Cisco IOS XE 16.6.1 Cisco IOS XE 16.6.2 Cisco IOS XE 16.6.3 Cisco IOS XE 16.6.4 Cisco IOS XE 16.6.4S Cisco IOS XE 16.6.5 Cisco IOS XE 16.6.6 Cisco IOS XE 16.6.7 Cisco IOS XE 16.6.8 Cisco IOS XE 16.6.9 Cisco IOS XE 16.6.10 Cisco IOS XE 16.7.1 Cisco IOS XE 16.7.2 Cisco IOS XE 16.7.3 Cisco IOS XE 16.8.1 Cisco IOS XE 16.8.1S Cisco IOS XE 16.8.2 Cisco IOS XE 16.8.3 Cisco IOS XE 16.9.1 Cisco IOS XE 16.9.1S Cisco IOS XE 16.9.2 Cisco IOS XE 16.9.2S Cisco IOS XE 16.9.3 Cisco IOS XE 16.9.3S Cisco IOS XE 16.9.4 Cisco IOS XE 16.9.5 Cisco IOS XE 16.9.6 Cisco IOS XE 16.9.7 Cisco IOS XE 16.9.8 Cisco IOS XE 16.9.8A Cisco IOS XE 16.9.8C Cisco IOS XE 16.10.1 Cisco IOS XE 16.10.1A Cisco IOS XE 16.10.1B Cisco IOS XE 16.10.1E Cisco IOS XE 16.10.1S Cisco IOS XE 16.10.2 Cisco IOS XE 16.10.3 Cisco IOS XE 16.11.1 Cisco IOS XE 16.11.1A Cisco IOS XE 16.11.1C Cisco IOS XE 16.11.1S Cisco IOS XE 16.11.2 Cisco IOS XE 16.12.1 Cisco IOS XE 16.12.1A Cisco IOS XE 16.12.1C Cisco IOS XE 16.12.1S Cisco IOS XE 16.12.2 Cisco IOS XE 16.12.2S Cisco IOS XE 16.12.2T Cisco IOS XE 16.12.3 Cisco IOS XE 16.12.3S Cisco IOS XE 16.12.4 Cisco IOS XE 16.12.5 Cisco IOS XE 16.12.6 Cisco IOS XE 16.12.7 Cisco IOS XE 16.12.8 Cisco IOS XE 17.1.1 Cisco IOS XE 17.1.1S Cisco IOS XE 17.1.1T Cisco IOS XE 17.1.2 Cisco IOS XE 17.1.3 Cisco IOS XE 17.2.1 Cisco IOS XE 17.2.1R Cisco IOS XE 17.2.1V Cisco IOS XE 17.2.2 Cisco IOS XE 17.2.3 Cisco IOS XE 17.3.1 Cisco IOS XE 17.3.1A Cisco IOS XE 17.3.2 Cisco IOS XE 17.3.3 Cisco IOS XE 17.3.4 Cisco IOS XE 17.3.4A Cisco IOS XE 17.3.5 Cisco IOS XE 17.4.1 Cisco IOS XE 17.4.1A Cisco IOS XE 17.4.1B Cisco IOS XE 17.4.2 Cisco IOS XE 17.5.1 Cisco IOS XE 17.5.1A Cisco IOS XE 17.6.1 Cisco IOS XE 17.6.1A Cisco IOS XE 17.6.2 Cisco IOS XE 17.6.3 Cisco IOS XE 17.6.3A Cisco IOS XE 17.7.1 Cisco IOS XE 17.7.1A Cisco IOS XE 17.7.2 Cisco IOS XE 17.8.1 Cisco IOS XE 17.8.1A	190
Application	Cisco Cisco Catalyst 8000V Edge - Cisco Cloud Services Router 1000V -	2
Hardware	Cisco Cisco 1000 Integrated Services Router - Cisco 1100 4G/6G Integrated Services Router - Cisco 1100 4G Integrated Services Router - Cisco 1100 4P Integrated Services Router - Cisco 1100 6G Integrated Services Router - Cisco 1100 8P Integrated Services Router - Cisco 1100 Integrated Services Router - Cisco 1101 4P Integrated Services Router - Cisco 1101 Integrated Services Router - Cisco 1109 2P Integrated Services Router - Cisco 1109 4P Integrated Services Router - Cisco 1109 Integrated Services Router - Cisco 1111X 8P Integrated Services Router - Cisco 1111X Integrated Services Router - Cisco 111X Integrated Services Router - Cisco 1120 Integrated Services Router - Cisco 1131 Integrated Services Router - Cisco 1160 Integrated Services Router - Cisco 4221 Integrated Services Router - Cisco 4321 Integrated Services Router - Cisco 4331 Integrated Services Router - Cisco 4351 Integrated Services Router - Cisco 4431 Integrated Services Router - Cisco 4451 X Integrated Services Router - Cisco 4461 Integrated Services Router - Cisco C8200 1N 4T - Cisco C8200L 1N 4T - Cisco C8500L 8S4X - Cisco Catalyst 8300 1N1S 4T2X - Cisco Catalyst 8300 1N1S 6T - Cisco Catalyst 8300 2N2S 4T2X - Cisco Catalyst 8300 2N2S 6T -	32

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv4-vfr-dos-CXxtFacb