From thehackernews.com
Cisco has warned of an active zero-day vulnerability in its router software that’s being exploited in the wild and could allow a remote, authenticated attacker to carry out memory exhaustion attacks on an affected device.
“An attacker could exploit these vulnerabilities by sending crafted IGMP traffic to an affected device,” Cisco said in an advisory posted over the weekend.
“A successful exploit could allow the attacker to cause memory exhaustion, resulting in instability of other processes. These processes may include, but are not limited to, interior and exterior routing protocols.”