PT-2010-4325 · Cisco · Cisco Ios+1

Published 2010-09-22 · Updated 2010-09-24 · CVE-2010-2830

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 15.0 Cisco IOS XE versions 2.5.x through 2.5.1

Description The IGMPv3 implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a malformed IGMP packet. This could result in a sustained denial of service condition if repeatedly exploited.

Recommendations For Cisco IOS versions 12.2 through 15.0, update to a version that includes the fix for this issue. For Cisco IOS XE versions 2.5.x through 2.5.1, update to version 2.5.2 or later.

Fix

Related Identifiers

CVE-2010-2830

Affected Products

Cisco Ios

Cisco Ios Xe

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-2830 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b4a310.shtml · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100922-igmp · Vendor Advisory