CVE-2021-1312 Cisco Elastic Services Controller Denial of Service Vulnerability

Medium 5.3 Published 20 Jan 2021 Updated 12 Nov 2024

Unauthenticated remote attackers can cause denial of service on the health monitor API by flooding TCP packets, affecting users who enable this feature.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2021-1312?

CVE-2021-1312 is a medium-severity denial of service vulnerability in Cisco Elastic Services Controller, published on 20 Jan 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the system resource management of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for the maximum number of TCP connections and SYN backlog. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow the attacker to block TCP listening ports that are used by the health monitor API. This vulnerability only affects customers who use the health monitor API.

Weakness: CWE-400

Which versions are affected by CVE-2021-1312?

It affects 1 product.

Products include Cisco Elastic Services Controller.

How do I fix CVE-2021-1312?

No fix has been published for CVE-2021-1312 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2021-1312 being exploited?

There is no known exploitation of CVE-2021-1312 in the wild and no public exploit code.

Sources

Also known as GHSA-3fjh-3qmq-p25v.