PT-2010-1952 · Cisco · Cisco Ios Xr

Published 2010-01-20 · Updated 2017-08-17 · CVE-2010-0137

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.4.1 through 3.7.0

Description The issue allows remote attackers to cause a denial of service by crashing the sshd child handler process in the SSH server and consuming memory via a crafted SSH2 packet. An attacker could trigger this issue by sending a crafted SSH version 2 packet, causing a new SSH connection handler process to crash. Repeated exploitation may lead to significant memory consumption and instability, impacting other system functionality. The parent SSH daemon process continues to function normally during this event.

Recommendations For versions 3.4.1 through 3.7.0, update to a fixed version of Cisco IOS XR Software to address the vulnerability. As a temporary workaround, consider restricting access to the SSH server to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-0137

Affected Products

Cisco Ios Xr

References · 8

• http://vupen.com/english/advisories/2010/0183 · Vendor Advisory
• http://secunia.com/advisories/38227 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100120-xr-ssh · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0137 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b13512.shtml · Vendor Advisory
• http://securitytracker.com/id?1023480 · Note
• http://securityfocus.com/bid/37878 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55767 · Note