CVE-2009-2056 - Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path

Back Back to CVE browser

LOW

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path

Published Aug 21, 2009

3.3

LOW

CVSS 2.0

EPSS 1.34%

Description

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (3)

http://securitytracker.com/id?1022756
vdb-entryx_refsource_SECTRACK
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml
vendor-advisoryx_refsource_CISCOPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2052
Advisory

Link	Providers	Tags
http://securitytracker.com/id?1022756		vdb-entryx_refsource_SECTRACK
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml		vendor-advisoryx_refsource_CISCOPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-2052		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Aug 21, 2009

Updated Sep 17, 2024

Reserved Jun 12, 2009

Link CVE-2009-2056

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-2056

Red Hat

No data

ENISA EUVD

Assigner cisco

Published Aug 21, 2009

Updated Sep 17, 2024

Link EUVD-2009-2052

GitHub

No data