CVE-2024-20327

A vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to crash the ppp_ma process, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of malformed PPPoE packets that are received on a router that is running Broadband Network Gateway (BNG) functionality with PPPoE termination on a Lightspeed-based or Lightspeed-Plus-based line card. An attacker could exploit this vulnerability by sending a crafted PPPoE packet to an affected line card interface that does not terminate PPPoE. A successful exploit could allow the attacker to crash the ppp_ma process, resulting in a DoS condition for PPPoE traffic across the router.

• CWE-20

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-pppma-JKWFgneWVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-pppma-JKWFgneWVendor Advisory

Published

Mar 13, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20321A vulnerability in the External Border Gateway Protocol (eBG…8.6
• CVE-2024-20322A vulnerability in the access control list (ACL) processing …5.8
• CVE-2024-20323A vulnerability in Cisco Intelligent Node (iNode) Software c…7.5
• CVE-2024-20324A vulnerability in the CLI of Cisco IOS XE Software could al…5.5
• CVE-2024-20325A vulnerability in the Live Data server of Cisco Unified Int…7.1
• CVE-2024-20326A vulnerability in the ConfD CLI and the Cisco Crosswork Ne…7.8
• CVE-2024-20328A vulnerability in the VirusEvent feature of ClamAV could al…5.3
• CVE-2024-20329A vulnerability in the SSH subsystem of Cisco Adaptive Secur…9.9
• CVE-2024-2033The Video Conferencing with Zoom plugin for WordPress is vul…4.3
• CVE-2024-20330A vulnerability in the Snort 2 and Snort 3 TCP and UDP detec…7.5
• CVE-2024-20331A vulnerability in the session authentication functionality …5.9
• CVE-2024-20332A vulnerability in the web-based management interface of Cis…5.5