Vulnetix
Try Vulnetix Request Demo
GCVE-VVD-CERTCC-2017-793496
Advisory PublishedCVSS 5.4/10
Vulnetix · Advisory published July 27, 2017
Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. Attackers with the ability to transmit messages from a routing domain router may send specially crafted OSPF messages to poison routing tables within the domain.
Download JSON Open in Console

Risk Scores

CVSS 2.0
5.4/10
Medium · AV:A/AC:M/Au:N/C:P/I:P/A:P
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score4.9remediation_levelNDreport_confidenceCenvironmental_score3.63967774290225target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND

Aliases

CVE-2017-3752CVE-2017-3224CVE-2017-6770

Transitive aliases

GSD-2017-3224CNVD-2017-35374CISCO-SA-20170727-OSPFCNVD-2017-33522VAR-201708-0553VAR-201807-0268GHSA-jc99-3vhg-wq8gVAR-201708-1564GSD-2017-3752GHSA-jx8q-f2pc-88fcGHSA-63cp-f7wp-c79rcisco-sa-20170727-ospfGSD-2017-6770

References

Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency
url
Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency
url
Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency
url
Open Shortest Path First (OSPF) protocol implementations may improperly determine LSA recency
advisory

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON