PT-2010-4507 · Cisco · Cisco Ios Xr

Publicado 2010-08-27 · Atualizado 2024-12-19 · CVE-2010-3035

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.4.0 through 3.9.1

Description The issue arises when Cisco IOS XR does not properly handle unrecognized transitive attributes in BGP, allowing remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement. This has been demonstrated in the wild with attribute type code 99. The vulnerability manifests when a BGP peer announces a prefix with a specific, valid but unrecognized transitive attribute, causing the Cisco IOS XR device to corrupt the attribute before sending it to neighboring devices, which may then reset the BGP peering session.

Recommendations For Cisco IOS XR versions 3.4.0 through 3.9.1, update to a version that includes the fix for this issue, as Cisco has released software updates that address this vulnerability. As a temporary workaround, consider restricting the handling of unrecognized transitive attributes in BGP to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2010-3035

Produtos afetados

Cisco Ios Xr

Referências · 12

• https://nvd.nist.gov/vuln/detail/CVE-2010-3035 · Nota de Segurança
• http://osvdb.org/67696 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml · Aviso do Fabricante
• https://t.me/cvenotify/86405 · Publicação no Telegram
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61443 · Aviso do Fabricante
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Nota
• http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html · Nota
• https://t.me/cvenotify/104994 · Publicação no Telegram
• http://secunia.com/advisories/41190 · Nota
• http://vupen.com/english/advisories/2010/2227 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100827-bgp · Aviso do Fabricante
• http://securitytracker.com/id?1024371 · Nota