Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7rpf-cp7m-9q4f

Опубликовано: 29 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability exists because eBGP traffic is mapped to a shared hardware rate-limiter queue. An attacker could exploit this vulnerability by sending large amounts of network traffic with certain characteristics through an affected device. A successful exploit could allow the attacker to cause eBGP neighbor sessions to be dropped, leading to a DoS condition in the network.

A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability exists because eBGP traffic is mapped to a shared hardware rate-limiter queue. An attacker could exploit this vulnerability by sending large amounts of network traffic with certain characteristics through an affected device. A successful exploit could allow the attacker to cause eBGP neighbor sessions to be dropped, leading to a DoS condition in the network.

EPSS

Процентиль: 69%
0.00599
Низкий

8.6 High

CVSS3

Дефекты

CWE-400
CWE-770

Связанные уязвимости

CVSS3: 8.6
nvd
почти 2 года назад

A vulnerability in the External Border Gateway Protocol (eBGP) implementation of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because eBGP traffic is mapped to a shared hardware rate-limiter queue. An attacker could exploit this vulnerability by sending large amounts of network traffic with certain characteristics through an affected device. A successful exploit could allow the attacker to cause eBGP neighbor sessions to be dropped, leading to a DoS condition in the network.

CVSS3: 8.6
fstec
почти 2 года назад

Уязвимость реализации протокола внешнего пограничного шлюза (eBGP) операционной системы Cisco NX-OS, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 69%
0.00599
Низкий

8.6 High

CVSS3

Дефекты

CWE-400
CWE-770