CVE-2024-20313

A vulnerability in the OSPF version 2 (OSPFv2) feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of OSPF updates that are processed by a device. An attacker could exploit this vulnerability by sending a malformed OSPF update to the device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

• CWE-120
• CWE-120

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ospf-dos-dR9SfrxpVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ospf-dos-dR9SfrxpVendor Advisory

Published

Apr 24, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20308A vulnerability in the IKEv1 fragmentation code of Cisco IOS…7.5
• CVE-2024-20309A vulnerability in auxiliary asynchronous port (AUX) functio…5.5
• CVE-2024-2031The Video Conferencing with Zoom plugin for WordPress is vul…5.4
• CVE-2024-20310A vulnerability in the web-based interface of Cisco Unified …6.1
• CVE-2024-20311A vulnerability in the Locator ID Separation Protocol (LISP)…7.5
• CVE-2024-20312A vulnerability in the Intermediate System-to-Intermediate S…7.4
• CVE-2024-20314A vulnerability in the IPv4 Software-Defined Access (SD-Acce…7.5
• CVE-2024-20315A vulnerability in the access control list (ACL) processing …5.8
• CVE-2024-20316A vulnerability in the data model interface (DMI) services o…5.3
• CVE-2024-20317A vulnerability in the handling of specific Ethernet frames …7.4
• CVE-2024-20318A vulnerability in the Layer 2 Ethernet services of Cisco IO…7.4
• CVE-2024-20319A vulnerability in the UDP forwarding code of Cisco IOS XR S…4.3