CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco IOS XR DVMRP Memory Exhaustion and IGMP Process Crash Vulnerability (CVE-2020-3569) Analysis & Mitigation Guide
[Affected Scope] Cisco IOS XR Software with the Distance Vector Multicast Routing Protocol (DVMRP) feature enabled
[Impact] An unauthenticated, remote attacker can cause an immediate crash of the IGMP process or exhaust system memory, leading to instability in critical routing protocols and denial of service (DoS)
[Mitigation] Apply official Cisco software updates, disable DVMRP multicast routing where not required, or implement IGMP packet filtering ACLs
Cisco IOS XR DVMRP Memory Exhaustion and Denial of Service Vulnerability (CVE-2020-3566)
[Affected Scope] Cisco IOS XR Software with the Distance Vector Multicast Routing Protocol (DVMRP) feature enabled
[Impact] Unauthenticated, remote attackers can cause complete memory exhaustion, leading to instability or crash of critical routing protocols and system processes (Denial of Service)
[Mitigation] Apply official Cisco software updates immediately, or implement temporary workarounds such as infrastructure ACLs to rate-limit or block unauthorized IGMP traffic