Vulnerabilities > CVE-2024-20259 - Out-of-bounds Write vulnerability in Cisco IOS XE

CVSS 8.6 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

cisco

CWE-787

NVD

Published: 2024-03-27

Updated: 2025-04-30

Summary

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to a crafted IPv4 DHCP request packet being mishandled when endpoint analytics are enabled. An attacker could exploit this vulnerability by sending a crafted DHCP request through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: The attack vector is listed as network because a DHCP relay anywhere on the network could allow exploits from networks other than the adjacent one.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XE 17.1.1 Cisco IOS XE 17.1.1A Cisco IOS XE 17.1.1S Cisco IOS XE 17.1.1T Cisco IOS XE 17.1.3 Cisco IOS XE 17.2.1 Cisco IOS XE 17.2.1A Cisco IOS XE 17.2.1R Cisco IOS XE 17.2.1V Cisco IOS XE 17.2.2 Cisco IOS XE 17.2.3 Cisco IOS XE 17.3.1 Cisco IOS XE 17.3.1A Cisco IOS XE 17.3.1W Cisco IOS XE 17.3.1X Cisco IOS XE 17.3.1Z Cisco IOS XE 17.3.2 Cisco IOS XE 17.3.2A Cisco IOS XE 17.3.3 Cisco IOS XE 17.3.4 Cisco IOS XE 17.3.4A Cisco IOS XE 17.3.4B Cisco IOS XE 17.3.4C Cisco IOS XE 17.3.5 Cisco IOS XE 17.3.5A Cisco IOS XE 17.3.5B Cisco IOS XE 17.3.6 Cisco IOS XE 17.3.7 Cisco IOS XE 17.3.8 Cisco IOS XE 17.3.8A Cisco IOS XE 17.4.1 Cisco IOS XE 17.4.1A Cisco IOS XE 17.4.1B Cisco IOS XE 17.4.2 Cisco IOS XE 17.4.2A Cisco IOS XE 17.5.1 Cisco IOS XE 17.5.1A Cisco IOS XE 17.6.1 Cisco IOS XE 17.6.1A Cisco IOS XE 17.6.1W Cisco IOS XE 17.6.1X Cisco IOS XE 17.6.1Y Cisco IOS XE 17.6.1Z Cisco IOS XE 17.6.1Z1 Cisco IOS XE 17.6.2 Cisco IOS XE 17.6.3 Cisco IOS XE 17.6.3A Cisco IOS XE 17.6.4 Cisco IOS XE 17.6.5 Cisco IOS XE 17.6.5A Cisco IOS XE 17.6.6 Cisco IOS XE 17.6.6A Cisco IOS XE 17.7.1 Cisco IOS XE 17.7.1A Cisco IOS XE 17.7.1B Cisco IOS XE 17.7.2 Cisco IOS XE 17.8.1 Cisco IOS XE 17.8.1A Cisco IOS XE 17.9.1 Cisco IOS XE 17.9.1A Cisco IOS XE 17.9.1W Cisco IOS XE 17.9.1X Cisco IOS XE 17.9.1X1 Cisco IOS XE 17.9.1Y Cisco IOS XE 17.9.1Y1 Cisco IOS XE 17.9.2 Cisco IOS XE 17.9.2A Cisco IOS XE 17.9.3 Cisco IOS XE 17.9.3A Cisco IOS XE 17.9.4 Cisco IOS XE 17.9.4A Cisco IOS XE 17.10.1 Cisco IOS XE 17.10.1A Cisco IOS XE 17.10.1B Cisco IOS XE 17.11.1 Cisco IOS XE 17.11.1A Cisco IOS XE 17.11.99Sw Cisco IOS XE 17.12.1 Cisco IOS XE 17.12.1A Cisco IOS XE 17.12.1W	80
Hardware	Cisco Cisco Catalyst 9100 - Cisco Catalyst 9105 - Cisco Catalyst 9105Ax - Cisco Catalyst 9105Axi - Cisco Catalyst 9105Axw - Cisco Catalyst 9105I - Cisco Catalyst 9105W - Cisco Catalyst 9115 - Cisco Catalyst 9115 AP - Cisco Catalyst 9115Ax - Cisco Catalyst 9115Axe - Cisco Catalyst 9115Axi - Cisco Catalyst 9117 - Cisco Catalyst 9117 AP - Cisco Catalyst 9117Ax - Cisco Catalyst 9117Axi - Cisco Catalyst 9120 - Cisco Catalyst 9120 AP - Cisco Catalyst 9120Ax - Cisco Catalyst 9120Axe - Cisco Catalyst 9120Axi - Cisco Catalyst 9120Axp - Cisco Catalyst 9124 - Cisco Catalyst 9124Ax - Cisco Catalyst 9124Axd - Cisco Catalyst 9124Axi - Cisco Catalyst 9124D - Cisco Catalyst 9124E - Cisco Catalyst 9124I - Cisco Catalyst 9130 - Cisco Catalyst 9130 AP - Cisco Catalyst 9130Ax - Cisco Catalyst 9130Axe - Cisco Catalyst 9130Axi - Cisco Catalyst 9136 - Cisco Catalyst 9162 - Cisco Catalyst 9164 - Cisco Catalyst 9166 - Cisco Catalyst 9166D1 - Cisco Catalyst 9200 - Cisco Catalyst 9200Cx - Cisco Catalyst 9200L - Cisco Catalyst 9300 - Cisco Catalyst 9300 24P A - Cisco Catalyst 9300 24P E - Cisco Catalyst 9300 24S A - Cisco Catalyst 9300 24S E - Cisco Catalyst 9300 24T A - Cisco Catalyst 9300 24T E - Cisco Catalyst 9300 24U A - Cisco Catalyst 9300 24U E - Cisco Catalyst 9300 24Ux A - Cisco Catalyst 9300 24Ux E - Cisco Catalyst 9300 48P A - Cisco Catalyst 9300 48P E - Cisco Catalyst 9300 48S A - Cisco Catalyst 9300 48S E - Cisco Catalyst 9300 48T A - Cisco Catalyst 9300 48T E - Cisco Catalyst 9300 48U A - Cisco Catalyst 9300 48U E - Cisco Catalyst 9300 48Un A - Cisco Catalyst 9300 48Un E - Cisco Catalyst 9300 48Uxm A - Cisco Catalyst 9300 48Uxm E - Cisco Catalyst 9300L - Cisco Catalyst 9300L 24P 4G A - Cisco Catalyst 9300L 24P 4G E - Cisco Catalyst 9300L 24P 4X A - Cisco Catalyst 9300L 24P 4X E - Cisco Catalyst 9300L 24T 4G A - Cisco Catalyst 9300L 24T 4G E - Cisco Catalyst 9300L 24T 4X A - Cisco Catalyst 9300L 24T 4X E - Cisco Catalyst 9300L 48P 4G A - Cisco Catalyst 9300L 48P 4G E - Cisco Catalyst 9300L 48P 4X A - Cisco Catalyst 9300L 48P 4X E - Cisco Catalyst 9300L 48T 4G A - Cisco Catalyst 9300L 48T 4G E - Cisco Catalyst 9300L 48T 4X A - Cisco Catalyst 9300L 48T 4X E - Cisco Catalyst 9300L Stack - Cisco Catalyst 9300Lm - Cisco Catalyst 9300X - Cisco Catalyst 9400 - Cisco Catalyst 9407R - Cisco Catalyst 9600X - Cisco Catalyst 9800 - Cisco Catalyst 9800 40 - Cisco Catalyst 9800 80 - Cisco Catalyst 9800 CL - Cisco Catalyst 9800 L - Cisco Catalyst 9800 L C - Cisco Catalyst 9800 L F - Cisco DN APL TTA M - Cisco DN APL TTA M RF -	97

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References