CVE-2024-20318

A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the line card network processor to reset, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of specific Ethernet frames that are received on line cards that have the Layer 2 services feature enabled. An attacker could exploit this vulnerability by sending specific Ethernet frames through an affected device. A successful exploit could allow the attacker to cause the ingress interface network processor to reset, resulting in a loss of traffic over the interfaces that are supported by the network processor. Multiple resets of the network processor would cause the line card to reset, resulting in a DoS condition.

• CWE-20

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xrl2vpn-jesrU3fc
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xrl2vpn-jesrU3fc

Published

Mar 13, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20312A vulnerability in the Intermediate System-to-Intermediate S…7.4
• CVE-2024-20313A vulnerability in the OSPF version 2 (OSPFv2) feature of Ci…7.4
• CVE-2024-20314A vulnerability in the IPv4 Software-Defined Access (SD-Acce…7.5
• CVE-2024-20315A vulnerability in the access control list (ACL) processing …5.8
• CVE-2024-20316A vulnerability in the data model interface (DMI) services o…5.3
• CVE-2024-20317A vulnerability in the handling of specific Ethernet frames …7.4
• CVE-2024-20319A vulnerability in the UDP forwarding code of Cisco IOS XR S…4.3
• CVE-2024-2032A race condition vulnerability exists in zenml-io/zenml vers…3.1
• CVE-2024-20320A vulnerability in the SSH client feature of Cisco IOS XR So…7.8
• CVE-2024-20321A vulnerability in the External Border Gateway Protocol (eBG…8.6
• CVE-2024-20322A vulnerability in the access control list (ACL) processing …5.8
• CVE-2024-20323A vulnerability in Cisco Intelligent Node (iNode) Software c…7.5