CVE-2023-20187 - A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition

Back Back to CVE browser

HIGH

A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition

Published Sep 27, 2023

8.6

HIGH

CVSS 3.1

EPSS 0.88%

Description

A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to incorrect handling of certain IPv6 multicast packets when they are fanned out more than seven times on an affected device. An attacker could exploit this vulnerability by sending a specific IPv6 multicast or IPv6 multicast VPN (MVPNv6) packet through the affected device. A successful exploit could allow the attacker to cause a reload of the affected device, resulting in a DoS condition.

Affected products

Vendor Cisco Product Cisco IOS XE Software Default
n/a
- Version
  16.10.1
  Status
  affected
  Constraints
  -
- Version
  16.10.1a
  Status
  affected
  Constraints
  -
- Version
  16.10.1e
  Status
  affected
  Constraints
  -
- Version
  16.10.1s
  Status
  affected
  Constraints
  -
- Version
  16.10.2
  Status
  affected
  Constraints
  -
- Version
  16.10.3
  Status
  affected
  Constraints
  -
- Version
  16.11.1
  Status
  affected
  Constraints
  -
- Version
  16.11.1a
  Status
  affected
  Constraints
  -
- Version
  16.11.1s
  Status
  affected
  Constraints
  -
- Version
  16.11.2
  Status
  affected
  Constraints
  -
- Version
  16.12.1
  Status
  affected
  Constraints
  -
- Version
  16.12.10a
  Status
  affected
  Constraints
  -
- Version
  16.12.1a
  Status
  affected
  Constraints
  -
- Version
  16.12.1c
  Status
  affected
  Constraints
  -
- Version
  16.12.1s
  Status
  affected
  Constraints
  -
- Version
  16.12.2
  Status
  affected
  Constraints
  -
- Version
  16.12.2s
  Status
  affected
  Constraints
  -
- Version
  16.12.3
  Status
  affected
  Constraints
  -
- Version
  16.12.3s
  Status
  affected
  Constraints
  -
- Version
  16.12.4
  Status
  affected
  Constraints
  -
- Version
  16.12.5
  Status
  affected
  Constraints
  -
- Version
  16.12.6
  Status
  affected
  Constraints
  -
- Version
  16.12.7
  Status
  affected
  Constraints
  -
- Version
  16.12.8
  Status
  affected
  Constraints
  -
- Version
  16.2.1
  Status
  affected
  Constraints
  -
- Version
  16.2.2
  Status
  affected
  Constraints
  -
- Version
  16.3.1
  Status
  affected
  Constraints
  -
- Version
  16.3.10
  Status
  affected
  Constraints
  -
- Version
  16.3.11
  Status
  affected
  Constraints
  -
- Version
  16.3.1a
  Status
  affected
  Constraints
  -
- Version
  16.3.2
  Status
  affected
  Constraints
  -
- Version
  16.3.3
  Status
  affected
  Constraints
  -
- Version
  16.3.4
  Status
  affected
  Constraints
  -
- Version
  16.3.5
  Status
  affected
  Constraints
  -
- Version
  16.3.6
  Status
  affected
  Constraints
  -
- Version
  16.3.7
  Status
  affected
  Constraints
  -
- Version
  16.3.8
  Status
  affected
  Constraints
  -
- Version
  16.3.9
  Status
  affected
  Constraints
  -
- Version
  16.4.1
  Status
  affected
  Constraints
  -
- Version
  16.4.2
  Status
  affected
  Constraints
  -
- Version
  16.4.3
  Status
  affected
  Constraints
  -
- Version
  16.5.1
  Status
  affected
  Constraints
  -
- Version
  16.5.1b
  Status
  affected
  Constraints
  -
- Version
  16.5.2
  Status
  affected
  Constraints
  -
- Version
  16.5.3
  Status
  affected
  Constraints
  -
- Version
  16.6.1
  Status
  affected
  Constraints
  -
- Version
  16.6.10
  Status
  affected
  Constraints
  -
- Version
  16.6.2
  Status
  affected
  Constraints
  -
- Version
  16.6.3
  Status
  affected
  Constraints
  -
- Version
  16.6.4
  Status
  affected
  Constraints
  -
- Version
  16.6.5
  Status
  affected
  Constraints
  -
- Version
  16.6.6
  Status
  affected
  Constraints
  -
- Version
  16.6.7
  Status
  affected
  Constraints
  -
- Version
  16.6.8
  Status
  affected
  Constraints
  -
- Version
  16.6.9
  Status
  affected
  Constraints
  -
- Version
  16.7.1
  Status
  affected
  Constraints
  -
- Version
  16.7.2
  Status
  affected
  Constraints
  -
- Version
  16.7.3
  Status
  affected
  Constraints
  -
- Version
  16.8.1
  Status
  affected
  Constraints
  -
- Version
  16.8.1s
  Status
  affected
  Constraints
  -
- Version
  16.8.2
  Status
  affected
  Constraints
  -
- Version
  16.8.3
  Status
  affected
  Constraints
  -
- Version
  16.9.1
  Status
  affected
  Constraints
  -
- Version
  16.9.1s
  Status
  affected
  Constraints
  -
- Version
  16.9.2
  Status
  affected
  Constraints
  -
- Version
  16.9.3
  Status
  affected
  Constraints
  -
- Version
  16.9.4
  Status
  affected
  Constraints
  -
- Version
  16.9.5
  Status
  affected
  Constraints
  -
- Version
  16.9.6
  Status
  affected
  Constraints
  -
- Version
  16.9.7
  Status
  affected
  Constraints
  -
- Version
  16.9.8
  Status
  affected
  Constraints
  -
- Version
  17.1.1
  Status
  affected
  Constraints
  -
- Version
  17.1.1s
  Status
  affected
  Constraints
  -
- Version
  17.1.1t
  Status
  affected
  Constraints
  -
- Version
  17.1.3
  Status
  affected
  Constraints
  -
- Version
  17.10.1
  Status
  affected
  Constraints
  -
- Version
  17.10.1a
  Status
  affected
  Constraints
  -
- Version
  17.11.1
  Status
  affected
  Constraints
  -
- Version
  17.11.1a
  Status
  affected
  Constraints
  -
- Version
  17.2.1
  Status
  affected
  Constraints
  -
- Version
  17.2.1r
  Status
  affected
  Constraints
  -
- Version
  17.2.1v
  Status
  affected
  Constraints
  -
- Version
  17.2.2
  Status
  affected
  Constraints
  -
- Version
  17.2.3
  Status
  affected
  Constraints
  -
- Version
  17.3.1
  Status
  affected
  Constraints
  -
- Version
  17.3.1a
  Status
  affected
  Constraints
  -
- Version
  17.3.2
  Status
  affected
  Constraints
  -
- Version
  17.3.3
  Status
  affected
  Constraints
  -
- Version
  17.3.4
  Status
  affected
  Constraints
  -
- Version
  17.3.4a
  Status
  affected
  Constraints
  -
- Version
  17.3.5
  Status
  affected
  Constraints
  -
- Version
  17.3.6
  Status
  affected
  Constraints
  -
- Version
  17.3.7
  Status
  affected
  Constraints
  -
- Version
  17.4.1
  Status
  affected
  Constraints
  -
- Version
  17.4.1a
  Status
  affected
  Constraints
  -
- Version
  17.4.1b
  Status
  affected
  Constraints
  -
- Version
  17.4.2
  Status
  affected
  Constraints
  -
- Version
  17.5.1
  Status
  affected
  Constraints
  -
- Version
  17.5.1a
  Status
  affected
  Constraints
  -
- Version
  17.5.1b
  Status
  affected
  Constraints
  -
- Version
  17.5.1c
  Status
  affected
  Constraints
  -
- Version
  17.6.1
  Status
  affected
  Constraints
  -
- Version
  17.6.1a
  Status
  affected
  Constraints
  -
- Version
  17.6.2
  Status
  affected
  Constraints
  -
- Version
  17.6.3
  Status
  affected
  Constraints
  -
- Version
  17.6.3a
  Status
  affected
  Constraints
  -
- Version
  17.6.4
  Status
  affected
  Constraints
  -
- Version
  17.6.5
  Status
  affected
  Constraints
  -
- Version
  17.6.5a
  Status
  affected
  Constraints
  -
- Version
  17.7.1
  Status
  affected
  Constraints
  -
- Version
  17.7.1a
  Status
  affected
  Constraints
  -
- Version
  17.7.2
  Status
  affected
  Constraints
  -
- Version
  17.8.1
  Status
  affected
  Constraints
  -
- Version
  17.8.1a
  Status
  affected
  Constraints
  -
- Version
  17.9.1
  Status
  affected
  Constraints
  -
- Version
  17.9.1a
  Status
  affected
  Constraints
  -
- Version
  17.9.2
  Status
  affected
  Constraints
  -
- Version
  17.9.2a
  Status
  affected
  Constraints
  -
- Version
  17.9.3
  Status
  affected
  Constraints
  -
- Version
  17.9.3a
  Status
  affected
  Constraints
  -
- Version
  3.10.0S
  Status
  affected
  Constraints
  -
- Version
  3.10.10S
  Status
  affected
  Constraints
  -
- Version
  3.10.1S
  Status
  affected
  Constraints
  -
- Version
  3.10.1xbS
  Status
  affected
  Constraints
  -
- Version
  3.10.2S
  Status
  affected
  Constraints
  -
- Version
  3.10.3S
  Status
  affected
  Constraints
  -
- Version
  3.10.4S
  Status
  affected
  Constraints
  -
- Version
  3.10.5S
  Status
  affected
  Constraints
  -
- Version
  3.10.6S
  Status
  affected
  Constraints
  -
- Version
  3.10.7S
  Status
  affected
  Constraints
  -
- Version
  3.10.8S
  Status
  affected
  Constraints
  -
- Version
  3.10.8aS
  Status
  affected
  Constraints
  -
- Version
  3.10.9S
  Status
  affected
  Constraints
  -
- Version
  3.11.0S
  Status
  affected
  Constraints
  -
- Version
  3.11.1S
  Status
  affected
  Constraints
  -
- Version
  3.11.2S
  Status
  affected
  Constraints
  -
- Version
  3.11.3S
  Status
  affected
  Constraints
  -
- Version
  3.11.4S
  Status
  affected
  Constraints
  -
- Version
  3.12.0S
  Status
  affected
  Constraints
  -
- Version
  3.12.1S
  Status
  affected
  Constraints
  -
- Version
  3.12.2S
  Status
  affected
  Constraints
  -
- Version
  3.12.3S
  Status
  affected
  Constraints
  -
- Version
  3.12.4S
  Status
  affected
  Constraints
  -
- Version
  3.13.0S
  Status
  affected
  Constraints
  -
- Version
  3.13.10S
  Status
  affected
  Constraints
  -
- Version
  3.13.1S
  Status
  affected
  Constraints
  -
- Version
  3.13.2S
  Status
  affected
  Constraints
  -
- Version
  3.13.2aS
  Status
  affected
  Constraints
  -
- Version
  3.13.3S
  Status
  affected
  Constraints
  -
- Version
  3.13.4S
  Status
  affected
  Constraints
  -
- Version
  3.13.5S
  Status
  affected
  Constraints
  -
- Version
  3.13.5aS
  Status
  affected
  Constraints
  -
- Version
  3.13.6S
  Status
  affected
  Constraints
  -
- Version
  3.13.6aS
  Status
  affected
  Constraints
  -
- Version
  3.13.7S
  Status
  affected
  Constraints
  -
- Version
  3.13.8S
  Status
  affected
  Constraints
  -
- Version
  3.13.9S
  Status
  affected
  Constraints
  -
- Version
  3.14.0S
  Status
  affected
  Constraints
  -
- Version
  3.14.1S
  Status
  affected
  Constraints
  -
- Version
  3.14.2S
  Status
  affected
  Constraints
  -
- Version
  3.14.3S
  Status
  affected
  Constraints
  -
- Version
  3.14.4S
  Status
  affected
  Constraints
  -
- Version
  3.15.0S
  Status
  affected
  Constraints
  -
- Version
  3.15.1S
  Status
  affected
  Constraints
  -
- Version
  3.15.2S
  Status
  affected
  Constraints
  -
- Version
  3.15.3S
  Status
  affected
  Constraints
  -
- Version
  3.15.4S
  Status
  affected
  Constraints
  -
- Version
  3.16.0S
  Status
  affected
  Constraints
  -
- Version
  3.16.10S
  Status
  affected
  Constraints
  -
- Version
  3.16.1aS
  Status
  affected
  Constraints
  -
- Version
  3.16.2S
  Status
  affected
  Constraints
  -
- Version
  3.16.2bS
  Status
  affected
  Constraints
  -
- Version
  3.16.3S
  Status
  affected
  Constraints
  -
- Version
  3.16.4aS
  Status
  affected
  Constraints
  -
- Version
  3.16.4bS
  Status
  affected
  Constraints
  -
- Version
  3.16.5S
  Status
  affected
  Constraints
  -
- Version
  3.16.6S
  Status
  affected
  Constraints
  -
- Version
  3.16.6bS
  Status
  affected
  Constraints
  -
- Version
  3.16.7S
  Status
  affected
  Constraints
  -
- Version
  3.16.7aS
  Status
  affected
  Constraints
  -
- Version
  3.16.7bS
  Status
  affected
  Constraints
  -
- Version
  3.16.8S
  Status
  affected
  Constraints
  -
- Version
  3.16.9S
  Status
  affected
  Constraints
  -
- Version
  3.17.0S
  Status
  affected
  Constraints
  -
- Version
  3.17.1S
  Status
  affected
  Constraints
  -
- Version
  3.17.1aS
  Status
  affected
  Constraints
  -
- Version
  3.17.2S
  Status
  affected
  Constraints
  -
- Version
  3.17.3S
  Status
  affected
  Constraints
  -
- Version
  3.17.4S
  Status
  affected
  Constraints
  -
- Version
  3.7.1S
  Status
  affected
  Constraints
  -
- Version
  3.7.2S
  Status
  affected
  Constraints
  -
- Version
  3.7.2tS
  Status
  affected
  Constraints
  -
- Version
  3.7.3S
  Status
  affected
  Constraints
  -
- Version
  3.7.4S
  Status
  affected
  Constraints
  -
- Version
  3.7.5S
  Status
  affected
  Constraints
  -
- Version
  3.7.6S
  Status
  affected
  Constraints
  -
- Version
  3.7.7S
  Status
  affected
  Constraints
  -
- Version
  3.8.0S
  Status
  affected
  Constraints
  -
- Version
  3.8.1S
  Status
  affected
  Constraints
  -
- Version
  3.8.2S
  Status
  affected
  Constraints
  -
- Version
  3.9.0S
  Status
  affected
  Constraints
  -
- Version
  3.9.1S
  Status
  affected
  Constraints
  -
- Version
  3.9.2S
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

Cisco IOS XE Software

n/a

Version	Status	Constraints
16.10.1	affected	-
16.10.1a	affected	-
16.10.1e	affected	-
16.10.1s	affected	-
16.10.2	affected	-
16.10.3	affected	-
16.11.1	affected	-
16.11.1a	affected	-
16.11.1s	affected	-
16.11.2	affected	-
16.12.1	affected	-
16.12.10a	affected	-
16.12.1a	affected	-
16.12.1c	affected	-
16.12.1s	affected	-
16.12.2	affected	-
16.12.2s	affected	-
16.12.3	affected	-
16.12.3s	affected	-
16.12.4	affected	-
16.12.5	affected	-
16.12.6	affected	-
16.12.7	affected	-
16.12.8	affected	-
16.2.1	affected	-
16.2.2	affected	-
16.3.1	affected	-
16.3.10	affected	-
16.3.11	affected	-
16.3.1a	affected	-
16.3.2	affected	-
16.3.3	affected	-
16.3.4	affected	-
16.3.5	affected	-
16.3.6	affected	-
16.3.7	affected	-
16.3.8	affected	-
16.3.9	affected	-
16.4.1	affected	-
16.4.2	affected	-
16.4.3	affected	-
16.5.1	affected	-
16.5.1b	affected	-
16.5.2	affected	-
16.5.3	affected	-
16.6.1	affected	-
16.6.10	affected	-
16.6.2	affected	-
16.6.3	affected	-
16.6.4	affected	-
16.6.5	affected	-
16.6.6	affected	-
16.6.7	affected	-
16.6.8	affected	-
16.6.9	affected	-
16.7.1	affected	-
16.7.2	affected	-
16.7.3	affected	-
16.8.1	affected	-
16.8.1s	affected	-
16.8.2	affected	-
16.8.3	affected	-
16.9.1	affected	-
16.9.1s	affected	-
16.9.2	affected	-
16.9.3	affected	-
16.9.4	affected	-
16.9.5	affected	-
16.9.6	affected	-
16.9.7	affected	-
16.9.8	affected	-
17.1.1	affected	-
17.1.1s	affected	-
17.1.1t	affected	-
17.1.3	affected	-
17.10.1	affected	-
17.10.1a	affected	-
17.11.1	affected	-
17.11.1a	affected	-
17.2.1	affected	-
17.2.1r	affected	-
17.2.1v	affected	-
17.2.2	affected	-
17.2.3	affected	-
17.3.1	affected	-
17.3.1a	affected	-
17.3.2	affected	-
17.3.3	affected	-
17.3.4	affected	-
17.3.4a	affected	-
17.3.5	affected	-
17.3.6	affected	-
17.3.7	affected	-
17.4.1	affected	-
17.4.1a	affected	-
17.4.1b	affected	-
17.4.2	affected	-
17.5.1	affected	-
17.5.1a	affected	-
17.5.1b	affected	-
17.5.1c	affected	-
17.6.1	affected	-
17.6.1a	affected	-
17.6.2	affected	-
17.6.3	affected	-
17.6.3a	affected	-
17.6.4	affected	-
17.6.5	affected	-
17.6.5a	affected	-
17.7.1	affected	-
17.7.1a	affected	-
17.7.2	affected	-
17.8.1	affected	-
17.8.1a	affected	-
17.9.1	affected	-
17.9.1a	affected	-
17.9.2	affected	-
17.9.2a	affected	-
17.9.3	affected	-
17.9.3a	affected	-
3.10.0S	affected	-
3.10.10S	affected	-
3.10.1S	affected	-
3.10.1xbS	affected	-
3.10.2S	affected	-
3.10.3S	affected	-
3.10.4S	affected	-
3.10.5S	affected	-
3.10.6S	affected	-
3.10.7S	affected	-
3.10.8S	affected	-
3.10.8aS	affected	-
3.10.9S	affected	-
3.11.0S	affected	-
3.11.1S	affected	-
3.11.2S	affected	-
3.11.3S	affected	-
3.11.4S	affected	-
3.12.0S	affected	-
3.12.1S	affected	-
3.12.2S	affected	-
3.12.3S	affected	-
3.12.4S	affected	-
3.13.0S	affected	-
3.13.10S	affected	-
3.13.1S	affected	-
3.13.2S	affected	-
3.13.2aS	affected	-
3.13.3S	affected	-
3.13.4S	affected	-
3.13.5S	affected	-
3.13.5aS	affected	-
3.13.6S	affected	-
3.13.6aS	affected	-
3.13.7S	affected	-
3.13.8S	affected	-
3.13.9S	affected	-
3.14.0S	affected	-
3.14.1S	affected	-
3.14.2S	affected	-
3.14.3S	affected	-
3.14.4S	affected	-
3.15.0S	affected	-
3.15.1S	affected	-
3.15.2S	affected	-
3.15.3S	affected	-
3.15.4S	affected	-
3.16.0S	affected	-
3.16.10S	affected	-
3.16.1aS	affected	-
3.16.2S	affected	-
3.16.2bS	affected	-
3.16.3S	affected	-
3.16.4aS	affected	-
3.16.4bS	affected	-
3.16.5S	affected	-
3.16.6S	affected	-
3.16.6bS	affected	-
3.16.7S	affected	-
3.16.7aS	affected	-
3.16.7bS	affected	-
3.16.8S	affected	-
3.16.9S	affected	-
3.17.0S	affected	-
3.17.1S	affected	-
3.17.1aS	affected	-
3.17.2S	affected	-
3.17.3S	affected	-
3.17.4S	affected	-
3.7.1S	affected	-
3.7.2S	affected	-
3.7.2tS	affected	-
3.7.3S	affected	-
3.7.4S	affected	-
3.7.5S	affected	-
3.7.6S	affected	-
3.7.7S	affected	-
3.8.0S	affected	-
3.8.1S	affected	-
3.8.2S	affected	-
3.9.0S	affected	-
3.9.1S	affected	-
3.9.2S	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-823

References (1)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mlre-H93FswRz
MitigationVendor Advisory

Link	Providers	Tags
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mlre-H93FswRz		MitigationVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Sep 27, 2023

Updated Aug 2, 2024

Reserved Oct 27, 2022

Link CVE-2023-20187

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-20187

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-20187