PT-2010-4325 · Cisco · Cisco Ios+1

Publicado 2010-09-22 · Atualizado 2010-09-24 · CVE-2010-2830

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 15.0 Cisco IOS XE versions 2.5.x through 2.5.1

Description The IGMPv3 implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a malformed IGMP packet. This could result in a sustained denial of service condition if repeatedly exploited.

Recommendations For Cisco IOS versions 12.2 through 15.0, update to a version that includes the fix for this issue. For Cisco IOS XE versions 2.5.x through 2.5.1, update to version 2.5.2 or later.

Correção

Identificadores relacionados

CVE-2010-2830

Produtos afetados

Cisco Ios

Cisco Ios Xe

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-2830 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_advisory09186a0080b4a310.shtml · Aviso do Fabricante
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100922-igmp · Aviso do Fabricante