Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service (DoS) attack if configured for IP tunnels and Cisco Express Forwarding. Cisco has released software updates that address this vulnerability. This advisory is posted at http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090923-tunnels. Note: The September 23, 2009, Cisco IOS Security Advisory bundled publication includes eleven Security Advisories. Ten of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses a vulnerability in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory. Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Advisory Bundled Publication" at the following link: http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html
Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service (DoS) attack if configured for IP tunnels and Cisco Express Forwarding.
Cisco has released software updates that address this vulnerability.
This advisory is posted at http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090923-tunnels.
Note: The September 23, 2009, Cisco IOS Security Advisory bundled publication includes eleven Security Advisories. Ten of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses a vulnerability in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the advisory.
Individual publication links are in "Cisco Event Response: Semiannual Cisco IOS Software Advisory Bundled Publication" at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.html
Cisco devices are vulnerable when running an affected version of Cisco IOS Software and configured for Generic Routing Encapsulation (GRE), IPinIP, Generic Packet Tunneling in IPv6 or IPv6 over IP tunnels with Cisco Express Forwarding enabled. The Cisco IOS Point to Point Tunneling Protocol (PPTP) feature creates GRE tunnels that are transparent to the user. Therefore systems configured for PPTP are also vulnerable.
The Cisco multicast Virtual Private Network (MVPN) feature also creates GRE tunnels that are transparent to the user, however MVPN configurations are not vulnerable, unless there are other tunnels that are configured explicitly.
A Cisco IOS device that is explicitly configured for a tunnel will have a configuration similar to the following in the output of show running-config:
interface tunnel0 ip address [IP-address] tunnel source [Tunnel-Source] tunnel destination [Tunnel Destination]
An alternative method to identify devices that are configured for tunnels is to use the show interfaces command. A sample output is provided below:
Router#show interfaces | include Tunnel Tunnel0 is up, line protocol is down Hardware is Tunnel [...] Tunnel protocol/transport GRE/IP !-- output truncated
A Cisco IOS device that is configured for Cisco Express Forwarding will display the forwarding table in the output of show ip cef output, as in the following example:
Router#show ip cef Prefix Next Hop Interface 0.0.0.0/0 10.48.64.1 Ethernet0/0 0.0.0.0/32 receive ....
Cisco Express Forwarding is enabled by default in most Cisco IOS Software versions.
To determine the Cisco IOS Software release that is running on a Cisco product, administrators can log in to the device and issue the show version command to display the system banner. The system banner confirms that the device is running Cisco IOS Software by displaying text similar to "Cisco Internetwork Operating System Software" or "Cisco IOS Software." The image name displays in parentheses, followed by "Version" and the Cisco IOS Software release name. Other Cisco devices do not have the show version command or may provide different output.
The following example identifies a Cisco 7200 series device running Cisco IOS Software release 12.3(19) with an installed image name of C7200-JS-M:
7200#show version Cisco Internetwork Operating System Software IOS (tm) 7200 Software (C7200-JS-M), Version 12.3(19), RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2006 by cisco Systems, Inc. Compiled Thu 11-May-06 22:37 by evmiller !-- output truncated
The following example identifies a Cisco 7300 series device running Cisco IOS Software release 12.3(22) with an installed image name of C7301-P-M:
7301# show version Cisco Internetwork Operating System Software IOS (tm) 7301 Software (C7301-P-M), Version 12.3(22), RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2007 by cisco Systems, Inc. Compiled Wed 24-Jan-07 20:26 by ccai !-- output truncated
Additional information about Cisco IOS Software release naming conventions is available in "White Paper: Cisco IOS Reference Guide" at the following link: http://www.cisco.com/warp/public/620/1.html.
Cisco IOS XR Software is not affected.
Cisco IOS XE Software is not affected.
IPsec and Dynamic Multipoint VPN (DMVPN) configurations that are protected by IPsec are not affected.
MVPN configurations are not affected.
Multiprotocol Label Switching (MPLS) Traffic Engineering (TE) tunnels are not affected.
No other Cisco products are currently known to be affected by these vulnerabilities.
A tunnel protocol encapsulates a wide variety of protocol packet types inside IP tunnels, creating a virtual point-to-point link between internetworking devices over an IP network.
Cisco Express Forwarding is a Layer 3 IP switching technology. It improves network performance and scalability for networks with high and dynamic traffic patterns.
Devices that are running Cisco IOS Software and configured for GRE, IPinIP, Generic Packet Tunneling in IPv6 or IPv6 over IP tunnels tunnels and Cisco Express Forwarding may reload upon switching a specially crafted malformed packets. Please note that using PPTP creates GRE tunnels that are transparent to the end user so devices configured for PPTP are vulnerable if they are configured on an affected software version. Using MVPN also creates GRE tunnels that are transparent to the end user. However MVPN configurations are not vulnerable.
These vulnerabilities are addressed by the Cisco Bug IDs CSCsh97579 ( registered customers only) , CSCsq31776 ( registered customers only) and CSCsx70889 ( registered customers only) and have been assigned Common Vulnerabilities and Exposures (CVE) IDs CVE-2009-2872 and CVE-2009-2873.
Disabling Cisco Express Forwarding will mitigate this vulnerability. It can be disabled in two ways:
Cisco Express Forwarding can be globally disabled by using the no ip cef and no ipv6 cef global configuration commands.
Cisco Express Forwarding can also be disabled on individual tunnel interfaces. To be effective, it must be disabled on all tunnel interfaces configured on an affected device. Cisco Express Forwarding can be disabled on individual interfaces as shown in the following example:
interface Tunnel [interface-ID] no ip route-cache cef no ipv6 cef
Note: Disabling Cisco Express Forwarding may have significant performance impact and is not recommended.
Additional mitigations that can be deployed on Cisco devices in the network are available in the Cisco Applied Mitigation Bulletin companion document for this advisory, which is available at the following link: http://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20090923-tunnels
When considering software upgrades, also consult http://www.cisco.com/go/psirt and any subsequent advisories to determine exposure and a complete upgrade solution.
In all cases, customers should exercise caution to be certain the devices to be upgraded contain sufficient memory and that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, contact the Cisco Technical Assistance Center (TAC) or your contracted maintenance provider for assistance.
Each row of the Cisco IOS software table (below) names a Cisco IOS release train. If a given release train is vulnerable, then the earliest possible releases that contain the fix (along with the anticipated date of availability for each, if applicable) are listed in the "First Fixed Release" column of the table. The "Recommended Release" column indicates the releases which have fixes for all the published vulnerabilities at the time of this Advisory. A device running a release in the given train that is earlier than the release in a specific column (less than the First Fixed Release) is known to be vulnerable. Cisco recommends upgrading to a release equal to or later than the release in the "Recommended Releases" column of the table.
|
Major Release |
Availability of Repaired Releases |
|
|---|---|---|
|
Affected 12.0-Based Releases |
First Fixed Release |
Recommended Release |
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 Releases up to and including 12.0(1)DB are not vulnerable. |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
12.0(32)S14; Available on 25-SEP-2009 12.0(33)S5 |
12.0(33)S5 12.0(32)S14; Available on 25-SEP-2009 |
|
|
Vulnerable; first fixed in 12.0S |
12.0(33)S5 12.0(32)S14; Available on 25-SEP-2009 |
|
|
Vulnerable; first fixed in 12.0S |
12.0(33)S5 12.0(32)S14; Available on 25-SEP-2009 |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.0S |
12.0(33)S5 12.0(32)S14; Available on 25-SEP-2009 |
|
|
Vulnerable; first fixed in 12.0S |
12.0(33)S5 12.0(32)S14; Available on 25-SEP-2009 |
|
|
12.0(32)SY9a 12.0(32)SY10; Available on 25-SEP-2009 |
12.0(32)SY9a 12.0(32)SY10; Available on 25-SEP-2009 |
|
|
Vulnerable; first fixed in 12.0S |
12.0(33)S5 12.0(32)S14; Available on 25-SEP-2009 |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 Releases up to and including 12.0(16)W5(21c) are not vulnerable. |
12.4(25b) 12.4(23b) |
|
|
Releases prior to 12.0(5)WC3b are vulnerable, release 12.0(5)WC3b and later are not vulnerable |
||
|
Not Vulnerable |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Not Vulnerable |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Releases prior to 12.0(4)XI2 are vulnerable, release 12.0(4)XI2 and later are not vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 Releases up to and including 12.0(6)XR are not vulnerable. |
12.4(25b) 12.4(23b) |
|
|
Not Vulnerable |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Affected 12.1-Based Releases |
First Fixed Release |
Recommended Release |
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Releases up to and including 12.1(13)AY are not vulnerable. Releases 12.1(22)AY1 and later are not vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Not Vulnerable |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.2SXF |
12.2(18)SXF17; Available on 30-SEP-2009 |
|
|
Releases up to and including 12.1(4)EA1c are not vulnerable. Releases 12.1(22)EA11 and later are not vulnerable; first fixed in 12.2SE |
12.2(50)SE3 |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.3BC |
12.2(33)SCB4 12.3(21a)BC9 |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.2SG |
12.2(31)SGA11; Available on 04-DEC-2009 12.2(50)SG4 |
|
|
Not Vulnerable |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Releases up to and including 12.1(1)EY are not vulnerable. |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 Releases up to and including 12.1(1)XS are not vulnerable. |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 Releases up to and including 12.1(4)XY are not vulnerable. |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Releases prior to 12.1(5)YE6 are vulnerable, release 12.1(5)YE6 and later are not vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Not Vulnerable |
||
|
Affected 12.2-Based Releases |
First Fixed Release |
Recommended Release |
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.2SB |
12.2(31)SB16 12.2(33)SB7 |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.2SG |
12.2(31)SGA11; Available on 04-DEC-2009 12.2(50)SG4 |
|
|
Vulnerable; first fixed in 12.2SG |
12.2(31)SGA11; Available on 04-DEC-2009 12.2(50)SG4 |
|
|
Vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Releases prior to 12.2(46)EY are vulnerable, release 12.2(46)EY and later are not vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Not Vulnerable |
||
|
Not Vulnerable |
||
|
Vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Vulnerable; first fixed in 12.2SRD |
12.2(33)SRD3 |
|
|
Vulnerable; first fixed in 12.2SRD |
12.2(33)SRD3 |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Releases up to and including 12.2(13)JA4 are not vulnerable. |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.2SB |
12.2(31)SB16 12.2(33)SB7 |
|
|
12.2(31)SB16 12.2(33)SB6 12.2(28)SB14; Available on 20-OCT-2009 |
12.2(33)SB7 |
|
|
Vulnerable; first fixed in 12.2SB |
12.2(31)SB16 12.2(33)SB7 |
|
|
Vulnerable; first fixed in 12.2SCB |
12.2(33)SCB4 |
|
|
12.2(33)SCB4 |
12.2(33)SCB4 |
|
|
12.2(50)SE2 12.2(52)SE; Available on 13-OCT-2009 |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Releases prior to 12.2(25)SEF2 are vulnerable, release 12.2(25)SEF2 and later are not vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
Releases prior to 12.2(25)SEG4 are vulnerable, release 12.2(25)SEG4 and later are not vulnerable; first fixed in 12.2SE |
12.2(50)SE3 12.2(52)SE; Available on 13-OCT-2009 |
|
|
12.2(50)SG4 12.2(53)SG |
12.2(50)SG4 |
|
|
12.2(31)SGA11; Available on 04-DEC-2009 |
12.2(31)SGA11; Available on 04-DEC-2009 |
|
|
Not Vulnerable |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.2SRD |
12.2(33)SRD3 |
|
|
Vulnerable; first fixed in 12.2SRD |
12.2(33)SRD3 |
|
|
12.2(33)SRC5; Available on 29-OCT-2009 |
12.2(33)SRD3 |
|
|
12.2(33)SRD2 |
12.2(33)SRD3 |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.2SXF |
12.2(18)SXF17; Available on 30-SEP-2009 |
|
|
Vulnerable; first fixed in 12.2SXF |
12.2(18)SXF17; Available on 30-SEP-2009 |
|
|
Vulnerable; first fixed in 12.2SXF |
12.2(18)SXF17; Available on 30-SEP-2009 |
|
|
Vulnerable; first fixed in 12.2SXF |
12.2(18)SXF17; Available on 30-SEP-2009 |
|
|
Vulnerable; first fixed in 12.2SXF |
12.2(18)SXF17; Available on 30-SEP-2009 |
|
|
12.2(18)SXF17; Available on 30-SEP-2009 Please see IOS Software Modularity Patch |
12.2(18)SXF17; Available on 30-SEP-2009 |
|
|
12.2(33)SXH6; Available on 30-OCT-2009 Please see IOS Software Modularity Patch |
12.2(33)SXH6; Available on 30-OCT-2009 |
|
|
12.2(33)SXI2 |
12.2(33)SXI2a |
|
|
Vulnerable; first fixed in 12.2SB |
12.2(31)SB16 12.2(33)SB7 |
|
|
Vulnerable; first fixed in 12.2SB |
12.2(31)SB16 12.2(33)SB7 |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4 Releases up to and including 12.2(1)XA are not vulnerable. |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Not Vulnerable |
||
|
Not Vulnerable |
||
|
Not Vulnerable |
||
|
Not Vulnerable |
||
|
Vulnerable; first fixed in 12.2SG |
12.2(31)SGA11; Available on 04-DEC-2009 12.2(50)SG4 |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4 Releases up to and including 12.2(8)YP are not vulnerable. |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Not Vulnerable |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.2SXF |
12.2(18)SXF17; Available on 30-SEP-2009 |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.2SXH |
12.2(33)SXH6; Available on 30-OCT-2009 |
|
|
Vulnerable; first fixed in 12.2SB |
12.2(31)SB16 12.2(33)SB7 |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
12.2(18)ZYA2 |
||
|
Affected 12.3-Based Releases |
First Fixed Release |
Recommended Release |
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
12.3(21a)BC9 |
12.3(21a)BC9 |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Not Vulnerable |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Not Vulnerable |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.2SB |
12.2(31)SB16 12.2(33)SB7 |
|
|
Vulnerable; first fixed in 12.4XR |
12.4(15)XR7 12.4(22)XR |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4T |
12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4XR |
12.4(15)XR7 12.4(22)XR |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4 |
12.4(25b) 12.4(23b) |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4XR |
12.4(15)XR7 12.4(22)XR |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4XR |
12.4(15)XR7 12.4(22)XR |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Affected 12.4-Based Releases |
First Fixed Release |
Recommended Release |
|
12.4(23b) 12.4(25b) |
12.4(25b) 12.4(23b) |
|
|
Not Vulnerable |
||
|
12.4(13d)JA |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4JA |
||
|
12.4(11)MD9 |
12.4(11)MD9 12.4(15)MD3 12.4(22)MD1 |
|
|
12.4(22)MDA1 |
12.4(22)MDA1 |
|
|
Releases prior to 12.4(19)MR3 are vulnerable, release 12.4(19)MR3 and later are not vulnerable |
12.4(19)MR3 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
12.4(15)T10 12.4(20)T4 12.4(22)T2 12.4(24)T2;Available on 23-OCT-2009 |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
12.4(22)XR 12.4(15)XR6 |
12.4(15)XR7 12.4(22)XR |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; Contact your support organization per the instructions in Obtaining Fixed Software section of this advisory |
||
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
Vulnerable; first fixed in 12.4T |
12.4(15)T10 12.4(20)T4 12.4(22)T3 12.4(24)T2; Available on 23-OCT-2009 |
|
|
12.4(22)YB4 |
12.4(22)YB4 |
|
|
12.4(22)YD1 |
12.4(22)YD1 |
|
|
12.4(22)YE1 |
12.4(22)YE1 |
|
Customers who are using Cisco IOS Software Modularity can apply the respective maintenance packs. More information on Cisco IOS Software Modularity can be found at the following link: http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/prod_bulletin0900aecd80313e15.html
The Maintenance Packs listed below can be downloaded at http://www.cisco.com/go/pn
|
Cisco IOS Software Release |
Solution Maintenance Pack(MP) |
|---|---|
|
12.2(18)SXF14 |
MP001 |
|
12.2(18)SXF15 |
MP001 |
|
12.2(18)SXF16 |
MP001 |
|
Cisco IOS Software Release |
Solution Maintenance Pack(MP) |
|---|---|
|
12.2(33)SXH5 |
MP001 |
The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability described in this advisory.
This vulnerability was found internally.
To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
|
Revision 1.3 |
2009-Oct-19 |
Updated ION software table. |
|
Revision 1.2 |
2009-Oct-02 |
Added the availability for 12.2(31)SGA11. Configuration commands in the Workarounds section have been clarified. |
|
Revision 1.1 |
2009-Sept-30 |
In the Workarounds section, configuration commands for disabling IPv6 CEF were added. |
|
Revision 1.0 |
2009-Sept-23 |
Initial public release |
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
A stand-alone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy, and may lack important information or contain factual errors. The information in this document is intended for end-users of Cisco products.
Vulmon