PT-2010-4507 · Cisco · Cisco Ios Xr

Published 2010-08-27 · Updated 2024-12-19 · CVE-2010-3035

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.4.0 through 3.9.1

Description The issue arises when Cisco IOS XR does not properly handle unrecognized transitive attributes in BGP, allowing remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement. This has been demonstrated in the wild with attribute type code 99. The vulnerability manifests when a BGP peer announces a prefix with a specific, valid but unrecognized transitive attribute, causing the Cisco IOS XR device to corrupt the attribute before sending it to neighboring devices, which may then reset the BGP peering session.

Recommendations For Cisco IOS XR versions 3.4.0 through 3.9.1, update to a version that includes the fix for this issue, as Cisco has released software updates that address this vulnerability. As a temporary workaround, consider restricting the handling of unrecognized transitive attributes in BGP to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-3035

Affected Products

Cisco Ios Xr

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2010-3035 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61443 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100827-bgp · Vendor Advisory
• http://osvdb.org/67696 · Note
• https://t.me/cvenotify/86405 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html · Note
• https://t.me/cvenotify/104994 · Telegram Post
• http://secunia.com/advisories/41190 · Note
• http://vupen.com/english/advisories/2010/2227 · Note
• http://securitytracker.com/id?1024371 · Note