CVE-2023-20014

A vulnerability in the DNS functionality of Cisco Nexus Dashboard Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to the improper processing of DNS requests. An attacker could exploit this vulnerability by sending a continuous stream of DNS requests to an affected device. A successful exploit could allow the attacker to cause the coredns service to stop working or cause the device to reload, resulting in a DoS condition.

Score
CVSS 3.1 7.5 High
Status
Modified - psirt@cisco.com
Published
2023-03-01
Last modified
2024-08-02
Weaknesses
CWE-399, CWE-400

Affected products

References

 
 
© AVABIS GmbH privacypolicy about