PT-2009-3713 · Cisco · Cisco Ios Xr

Published 2009-08-18 · Updated 2009-08-21 · CVE-2009-1154

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.8.1 and earlier

Description The issue allows remote attackers to cause a denial of service via a long BGP UPDATE message. Specifically, when a BGP peer announces a prefix with a specific invalid attribute, the Cisco IOS XR device will restart the peering session. Additionally, the BGP process may crash when sending a long length BGP update message or when constructing a BGP update with a large number of AS prepends.

Recommendations For Cisco IOS XR versions 3.8.1 and earlier, apply the free software maintenance upgrade (SMU) released by Cisco to address these vulnerabilities. As a temporary workaround, consider restricting the length of BGP update messages and the number of AS prepends to prevent the BGP process from crashing. Avoid using the AS Path Attribute with many AS numbers in the BGP UPDATE message until the issue is resolved.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-1154

Affected Products

Cisco Ios Xr

References · 4

• http://cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1154 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090818-bgp · Vendor Advisory
• http://securitytracker.com/id?1022756 · Note