Cisco IOS XR 3.4.0 up to and including 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote malicious users to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cisco ios xr 3.4.2 |
||
cisco ios xr 3.4.3 |
||
cisco ios xr 3.6.3 |
||
cisco ios xr 3.7.0 |
||
cisco ios xr 3.8.4 |
||
cisco ios xr 3.9.0 |
||
cisco ios xr 3.4.0 |
||
cisco ios xr 3.4.1 |
||
cisco ios xr 3.6.1 |
||
cisco ios xr 3.6.2 |
||
cisco ios xr 3.8.1 |
||
cisco ios xr 3.8.2 |
||
cisco ios xr 3.8.3 |
||
cisco ios xr 3.5.4 |
||
cisco ios xr 3.6.0 |
||
cisco ios xr 3.7.3 |
||
cisco ios xr 3.8.0 |
||
cisco ios xr 3.5.2 |
||
cisco ios xr 3.5.3 |
||
cisco ios xr 3.7.1 |
||
cisco ios xr 3.7.2 |
||
cisco ios xr 3.9.1 |