CVE-2024-20467

A vulnerability in the implementation of the IPv4 fragmentation reassembly code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper management of resources during fragment reassembly. An attacker could exploit this vulnerability by sending specific sizes of fragmented packets to an affected device or through a Virtual Fragmentation Reassembly (VFR)-enabled interface on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: This vulnerability affects Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers if they are running Cisco IOS XE Software Release 17.12.1 or 17.12.1a.

• CWE-399

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cpp-vfr-dos-nhHKGgOVendor Advisory

Published

Sep 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-20461A vulnerability in the CLI of Cisco ATA 190 Series Anal…6
• CVE-2024-20462A vulnerability in the web-based management interface of Cis…5.5
• CVE-2024-20463A vulnerability in the web-based management interface of Cis…7.1
• CVE-2024-20464A vulnerability in the Protocol Independent Multicast (PIM) …8.6
• CVE-2024-20465A vulnerability in the access control list (ACL) programming…5.8
• CVE-2024-20466A vulnerability in the web-based management interface of Cis…4.9
• CVE-2024-20469A vulnerability in specific CLI commands in Cisco Identity S…6.7
• CVE-2024-2047The ElementsKit Elementor addons plugin for WordPress is vul…8.8
• CVE-2024-20470A vulnerability in the web-based management interface of Cis…7.2
• CVE-2024-20471A vulnerability in the web-based management interface of Cis…6.5
• CVE-2024-20472A vulnerability in the web-based management interface of Cis…6.5
• CVE-2024-20473A vulnerability in the web-based management interface of Cis…6.5