CVE-2023-20051 Cisco Packet Data Network Gateway IPsec ICMP Denial of Service Vulnerability
An unauthenticated remote attacker can cause a denial of service by sending malformed ESP packets to the Cisco Packet Data Network Gateway.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-20051?
CVE-2023-20051 is a medium-severity denial of service vulnerability in Cisco ASR 5000 Series Software, published on 5 Apr 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an unauthenticated, remote attacker to stop ICMP traffic from being processed over an IPsec connection. This vulnerability is due to the VPP improperly handling a malformed packet. An attacker could exploit this vulnerability by sending a malformed Encapsulating Security Payload (ESP) packet over an IPsec connection. A successful exploit could allow the attacker to stop ICMP traffic over an IPsec connection and cause a denial of service (DoS).
Weakness: CWE-400
Which versions are affected by CVE-2023-20051?
It affects 1 product.
Products include Cisco Packet Data Network Gateway.
How do I fix CVE-2023-20051?
No fix has been published for CVE-2023-20051 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2023-20051 being exploited?
There is no known exploitation of CVE-2023-20051 in the wild and no public exploit code.
Sources
Also known as GHSA-7prw-fc99-vjm9.