CVE-2020-3305

MEDIUM Year: 2020
CVSS v3 Score
6.8
Medium
CVSS v2 Score
7.8
High
Weakness Type
CWE-400
View all →

Vulnerability Description

A vulnerability in the implementation of the Border Gateway Protocol (BGP) module in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP packets. An attacker could exploit this vulnerability by sending a crafted BGP packet. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

Related Vulnerabilities

CVE-2016-6172

MEDIUM
CVSS:6.8(Medium)

PowerDNS (aka pdns) Authoritative Server before 4.0.1 allows remote primary DNS servers to cause a denial of service (memory exhaustion and secondary DNS server crash) via a large (1) AXFR or (2) IXFR...

CWE-4002016

CVE-2018-15399

MEDIUM
CVSS:6.8(Medium)

A vulnerability in the TCP syslog module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to exhaus...

CWE-4002018

CVE-2018-20169

MEDIUM
CVSS:6.8(Medium)

An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core...

CWE-4002018

CVE-2019-1814

MEDIUM
CVSS:6.8(Medium)

A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series (Sx300) Managed Switches could allow an unauthenticated, remote attacker to cause the device ...

CWE-4002019

CVE-2020-3132

MEDIUM
CVSS:6.8(Medium)

A vulnerability in the email message scanning feature of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to cause a temporary denial of ...

CWE-4002020

CVE-2020-3306

MEDIUM
CVSS:6.8(Medium)

A vulnerability in the DHCP module of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a deni...

CWE-4002020