CVE-2009-2055 - Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009

Back Back to CVE browser

MEDIUM KEV

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009

Published Aug 19, 2009 ·Due Apr 15, 2022

5.9

MEDIUM

CVSS 3.1

EPSS 3.31%

Description

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (4)

http://mailman.nanog.org/pipermail/nanog/2009-August/012719.html
mailing-listx_refsource_MLISTMailing List
http://securitytracker.com/id?1022739
vdb-entryx_refsource_SECTRACKBroken Link
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml
vendor-advisoryx_refsource_CISCOPatchVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-2055
government-resourceUS Government Resource

Link	Providers	Tags
http://mailman.nanog.org/pipermail/nanog/2009-August/012719.html		mailing-listx_refsource_MLISTMailing List
http://securitytracker.com/id?1022739		vdb-entryx_refsource_SECTRACKBroken Link
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml		vendor-advisoryx_refsource_CISCOPatchVendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-2055		government-resourceUS Government Resource