Executive brief
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst switches could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition. The flaw is due to insufficient error handling of incomplete BFD headers, which can be exploited by sending crafted BFD packets to trigger a reload of the system.
Affected products
- Cisco Catalyst 4500 Series Switches
- Cisco Catalyst 4500-X Series Switches
- Cisco Catalyst 4900M Switch
- Cisco Catalyst 4948E Ethernet Switch
- Cisco IOS
- Cisco IOS XE
Timeline
- 2018-03-28: advisory: Initial Cisco Security Advisory published
- 2022-03-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
- 2022-03-03: disclosed: NVD publication date