CVE-2023-20072

A vulnerability in the fragmentation handling code of tunnel protocol packets in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of large fragmented tunnel protocol packets. One example of a tunnel protocol is Generic Routing Encapsulation (GRE). An attacker could exploit this vulnerability by sending crafted fragmented packets to an affected system. A successful exploit could allow the attacker to cause the affected system to reload, resulting in a DoS condition. Note: Only traffic directed to the affected system can be used to exploit this vulnerability.

• CWE-20

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-gre-crash-p6nE5Sq5Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-gre-crash-p6nE5Sq5Vendor Advisory

Published

Mar 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20067A vulnerability in the HTTP-based client profiling feature o…6.5
• CVE-2023-20068A vulnerability in the web-based management interface of Cis…6.1
• CVE-2023-20069A vulnerability in the web-based management interface of Cis…5.4
• CVE-2023-2007The specific flaw exists within the DPT I2O Controller drive…7.8
• CVE-2023-20070A vulnerability in the TLS 1.3 implementation of the Cisco F…4
• CVE-2023-20071Multiple Cisco products are affected by a vulnerability in t…5.8
• CVE-2023-20073A vulnerability in the web-based management interface of Cis…9.8
• CVE-2023-20074Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2023-20075Vulnerability in the CLI of Cisco Secure Email Gateway could…6.7
• CVE-2023-20076A vulnerability in the Cisco IOx application hosting environ…8.8
• CVE-2023-20077Multiple vulnerabilities in the web-based management interfa…6.5
• CVE-2023-20078Multiple vulnerabilities in the web-based management interfa…9.8