CVE-2009-1154

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.4.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.5:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.7.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.7.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*

History

21 Nov 2024, 01:01

Type Values Removed Values Added
References () http://securitytracker.com/id?1022756 - () http://securitytracker.com/id?1022756 -
References () http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml - Patch, Vendor Advisory () http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml - Patch, Vendor Advisory

Information

Published : 2009-08-21 17:30

Updated : 2024-11-21 01:01


NVD link : CVE-2009-1154

Mitre link : CVE-2009-1154

CVE.ORG link : CVE-2009-1154


JSON object : View

Products Affected

cisco

  • ios_xr
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer