CVE-2023-20089

mediumPriorität · verfolgen · 26EPSS 0.003 · 22. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.30% (22nd) EPSS

CVSS 6.5 · medium

Is it mine?

49 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisco_csaf

EPSS · bewertet 2026-10-27

A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to cause a memory leak, which could result in an unexpected reload of the device. This vulnerability is due to incorrect error checking when parsing ingress LLDP packets. An attacker could exploit this vulnerability by sending a steady stream of crafted LLDP packets to an affected device. A successful exploit could allow the attacker to cause a memory leak, which could result in a denial of service (DoS) condition when the device unexpectedly reloads. Note: This vulnerability cannot be exploited by transit traffic through the device. The crafted LLDP packet must be targeted to a directly connected interface, and the attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). In addition, the attack surface for this vulnerability can be reduced by disabling LLDP on interfaces where it is not required.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenCisco NX-OS System Software in ACI Mode 15.2(1g) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(2e) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(2f) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(2g) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(2h) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(3e) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(3f) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(3g) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(4d) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(4e) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(4f) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(5c) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(5d) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 15.2(5e) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 16.0(1g) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco NX-OS System Software in ACI Mode 16.0(1j) when installed on Cisco Nexus 9000 Series Switchescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.4

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6–7.4

v3.16.5mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.17.4highAV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.17.4highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · ENISA EU

v3.17.4highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · psirt@cisco.com USAusnutzbarkeit 2.8 · Auswirkung 4

v3.16mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.17.4highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hsecondary · Cisco PSIRT US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-401USprimärCWE-401USCWE-789USCWE-789US

betroffene Produkte (49)

Betroffene Produkte und Versionsbereiche.

20 von 49 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

cisco-sa-aci-lldp-dos-ySCNZOpXCisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability2023-02-22csaf · cisco_csafUS
A vulnerability in the Link Layer Discovery Protocol (LLDP) feature for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to cause a memory leak, which could result in an unexpected reload of the device. This vulnerability is due to incorrect error checking when parsing ingress LLDP packets. An attacker could exploit this vulnerability by sending a steady stream of crafted LLDP packets to an affected device. A successful exploit could allow the attacker to cause a memory leak, which could result in a denial of service (DoS) condition when the device unexpectedly reloads. Note: This vulnerability cannot be exploited by transit traffic through the device. The crafted LLDP packet must be targeted to a directly connected interface, and the attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). In addition, the attack surface for this vulnerability can be reduced by disabling LLDP on interfaces where it is not required. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the February 2023 Cisco FXOS and NX-OS Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: February 2023 Semiannual Cisco FXOS and NX-OS Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75057"].

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisco_csaf NVD CVE.org MITRE

veröffentlicht 2023-02-23geändert 2026-06-17

verwandt (3,014)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2023-26083US	low3.3OT kritisch	1.22% (68th)	KEV	2023-04-06
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0p0 - r42p0, Valhall G…
CVE-2021-1906US	medium5.5OT kritisch	0.52% (44th)	KEV	2021-05-07
Improper handling of address deregistration on failure can lead to new GPU address allocation failure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C…
CVE-2018-0158US	high8.6OT kritisch	7.19% (94th)	KEV	2018-03-28
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a mem…
CVE-2023-25136US	medium6.5	89.8% (100th)	Exploit	2023-02-03
OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unaut…
CVE-2016-4232US	high7.5	36.5% (98th)	Exploit	2016-07-13
Adobe Flash Player before 18.0.0.366 and 19.x through 22.x before 22.0.0.209 on Windows and OS X and before 11.2.202.632 on Linux allows attackers to obtain sensitive information f…

+3009 weitere

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan