CVE-2009-1154 - Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute

Back Back to CVE browser

LOW

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute

Published Aug 21, 2009

3.3

LOW

CVSS 2.0

EPSS 1.34%

Description

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

http://securitytracker.com/id?1022756
vdb-entryx_refsource_SECTRACK
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml
vendor-advisoryx_refsource_CISCOPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1154
Advisory

Link	Providers	Tags
http://securitytracker.com/id?1022756		vdb-entryx_refsource_SECTRACK
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml		vendor-advisoryx_refsource_CISCOPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1154		Advisory