CVE-2021-34720

CVE	CVE-2021-34720
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2021-09-09 05:15:00 UTC
Updated	2023-11-07 03:36:00 UTC
Description	A vulnerability in the IP Service Level Agreements (IP SLA) responder and Two-Way Active Measurement Protocol (TWAMP) features of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause device packet memory to become exhausted or cause the IP SLA process to crash, resulting in a denial of service (DoS) condition. This vulnerability exists because socket creation failures are mishandled during the IP SLA and TWAMP processes. An attacker could exploit this vulnerability by sending specific IP SLA or TWAMP packets to an affected device. A successful exploit could allow the attacker to exhaust the packet memory, which will impact other processes, such as routing protocols, or crash the IP SLA process.

Problem Types: NVD-CWE-Other

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Cisco	8101-32fh	-	All	All	All
Hardware	Cisco	8101-32h	-	All	All	All
Hardware	Cisco	8102-64h	-	All	All	All
Hardware	Cisco	8201	-	All	All	All
Hardware	Cisco	8201-32fh	-	All	All	All
Hardware	Cisco	8202	-	All	All	All
Hardware	Cisco	8804	-	All	All	All
Hardware	Cisco	8808	-	All	All	All
Hardware	Cisco	8812	-	All	All	All
Hardware	Cisco	8818	-	All	All	All
Hardware	Cisco	Asr 9000v-v2	-	All	All	All
Hardware	Cisco	Asr 9001	-	All	All	All
Hardware	Cisco	Asr 9006	-	All	All	All
Hardware	Cisco	Asr 9010	-	All	All	All
Hardware	Cisco	Asr 9901	-	All	All	All
Hardware	Cisco	Asr 9902	-	All	All	All
Hardware	Cisco	Asr 9903	-	All	All	All
Hardware	Cisco	Asr 9904	-	All	All	All
Hardware	Cisco	Asr 9906	-	All	All	All
Hardware	Cisco	Asr 9910	-	All	All	All
Hardware	Cisco	Asr 9912	-	All	All	All
Hardware	Cisco	Asr 9922	-	All	All	All
Operating System	Cisco	Ios Xr	All	All	All	All
Hardware	Cisco	Ios Xrv	-	All	All	All
Hardware	Cisco	Ios Xrv 9000	-	All	All	All
Hardware	Cisco	Ncs 1001	-	All	All	All
Hardware	Cisco	Ncs 1002	-	All	All	All
Hardware	Cisco	Ncs 1004	-	All	All	All
Hardware	Cisco	Ncs 4009	-	All	All	All
Hardware	Cisco	Ncs 4016	-	All	All	All
Hardware	Cisco	Ncs 5001	-	All	All	All
Hardware	Cisco	Ncs 5002	-	All	All	All
Hardware	Cisco	Ncs 5011	-	All	All	All
Hardware	Cisco	Ncs 520	-	All	All	All
Hardware	Cisco	Ncs 540	-	All	All	All
Hardware	Cisco	Ncs 540 Fronthaul	-	All	All	All
Hardware	Cisco	Ncs 5501	-	All	All	All
Hardware	Cisco	Ncs 5501-se	-	All	All	All
Hardware	Cisco	Ncs 5502	-	All	All	All
Hardware	Cisco	Ncs 5502-se	-	All	All	All
Hardware	Cisco	Ncs 5508	-	All	All	All
Hardware	Cisco	Ncs 5516	-	All	All	All
Hardware	Cisco	Ncs 560-4	-	All	All	All
Hardware	Cisco	Ncs 560-7	-	All	All	All
Hardware	Cisco	Ncs 6000	-	All	All	All
Hardware	Cisco	Ncs 6008	-	All	All	All

Reference	Source	Link	Tags
Cisco IOS XR Software IP Service Level Agreements and Two-Way Active Measurement Protocol Denial of Service Vulnerability	CISCO	tools.cisco.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

317033 Cisco Internetwork Operating System (IOS) XR Software IP Service Level Agreements and Two-Way Active Measurement Protocol Denial of Service (DoS) Vulnerability (cisco-sa-ipsla-ZA3SRrpP)