CVE-2024-20317

A vulnerability in the handling of specific Ethernet frames by Cisco IOS XR Software for various Cisco Network Convergence System (NCS) platforms could allow an unauthenticated, adjacent attacker to cause critical priority packets to be dropped, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect classification of certain types of Ethernet frames that are received on an interface. An attacker could exploit this vulnerability by sending specific types of Ethernet frames to or through the affected device. A successful exploit could allow the attacker to cause control plane protocol relationships to fail, resulting in a DoS condition. For more information, see the section of this advisory. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

• CWE-684

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-l2services-2mvHdNuCVendor Advisory

Published

Sep 11, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20311A vulnerability in the Locator ID Separation Protocol (LISP)…7.5
• CVE-2024-20312A vulnerability in the Intermediate System-to-Intermediate S…7.4
• CVE-2024-20313A vulnerability in the OSPF version 2 (OSPFv2) feature of Ci…7.4
• CVE-2024-20314A vulnerability in the IPv4 Software-Defined Access (SD-Acce…7.5
• CVE-2024-20315A vulnerability in the access control list (ACL) processing …5.8
• CVE-2024-20316A vulnerability in the data model interface (DMI) services o…5.3
• CVE-2024-20318A vulnerability in the Layer 2 Ethernet services of Cisco IO…7.4
• CVE-2024-20319A vulnerability in the UDP forwarding code of Cisco IOS XR S…4.3
• CVE-2024-2032A race condition vulnerability exists in zenml-io/zenml vers…3.1
• CVE-2024-20320A vulnerability in the SSH client feature of Cisco IOS XR So…7.8
• CVE-2024-20321A vulnerability in the External Border Gateway Protocol (eBG…8.6
• CVE-2024-20322A vulnerability in the access control list (ACL) processing …5.8