PT-2009-3713 · Cisco · Cisco Ios Xr

Publicado 2009-08-18 · Atualizado 2009-08-21 · CVE-2009-1154

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:N/AC:L/Au:M/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.8.1 and earlier

Description The issue allows remote attackers to cause a denial of service via a long BGP UPDATE message. Specifically, when a BGP peer announces a prefix with a specific invalid attribute, the Cisco IOS XR device will restart the peering session. Additionally, the BGP process may crash when sending a long length BGP update message or when constructing a BGP update with a large number of AS prepends.

Recommendations For Cisco IOS XR versions 3.8.1 and earlier, apply the free software maintenance upgrade (SMU) released by Cisco to address these vulnerabilities. As a temporary workaround, consider restricting the length of BGP update messages and the number of AS prepends to prevent the BGP process from crashing. Avoid using the AS Path Attribute with many AS numbers in the BGP UPDATE message until the issue is resolved.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-1154

Produtos afetados

Cisco Ios Xr

Referências · 4

• http://securitytracker.com/id?1022756 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1154 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090818-bgp · Aviso do Fabricante