Cisco IOS XE Software Errdisable Denial of Service Vulnerability

A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service (DoS) condition. The vulnerability is due to a race condition that occurs when the VLAN and port enter an errdisabled state, resulting in an incorrect state in the software. An attacker could exploit this vulnerability by sending frames that trigger the errdisable condition. A successful exploit could allow the attacker to cause the affected device to crash, leading to a DoS condition.

N/A

使用共享资源的并发执行不恰当同步问题(竞争条件)

Cisco Catalyst 3650、3850和4500E Series Switchs IOS XE Software 竞争条件漏洞

Cisco Catalyst 3650、3850和4500E Series Switchs都是美国思科（Cisco）公司的不同系列的交换机产品。IOS XE Software是运行在其中的一套Cisco为其网络设备开发的操作系统。 Cisco Catalyst 3650、3850和4500E Series Switchs中的IOS XE Software中的errdisable per VLAN功能存在竞争条件漏洞。物理位置邻近的攻击者可利用该漏洞造成拒绝服务（设备崩溃）。

N/A

N/A