Cisco IOS XR 3.4.0 up to and including 3.8.1 allows remote malicious users to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cisco ios xr 3.4 |
||
cisco ios xr 3.4.0 |
||
cisco ios xr 3.4.1 |
||
cisco ios xr 3.7.3 |
||
cisco ios xr 3.8.1 |
||
cisco ios xr 3.8.0 |
||
cisco ios xr 3.4.3 |
||
cisco ios xr 3.5.3 |
||
cisco ios xr 3.6.2 |
||
cisco ios xr 3.7.0 |
||
cisco ios xr 3.7.2 |
||
cisco ios xr 3.5.2 |
||
cisco ios xr 3.5.4 |
||
cisco ios xr 3.6.0 |
||
cisco ios xr 3.6.1 |
||
cisco ios xr 3.4.2 |
||
cisco ios xr 3.5 |
||
cisco ios xr 3.6.3 |
||
cisco ios xr 3.7.1 |