The RIP process in Cisco IOS XR allows remote malicious users to cause a denial of service (process crash) via a crafted version-2 RIP packet, aka Bug ID CSCue46731.
cisco ios xr