Cisco IOS Software Internet Group Management Protocol Denial of Service Vulnerability

A vulnerability in the Internet Group Management Protocol (IGMP)
version 3 implementation of Cisco IOS® Software and Cisco IOS XE Software
allows a remote unauthenticated attacker to cause a reload of an affected
device. Repeated attempts to exploit this vulnerability could result in a
sustained denial of service (DoS) condition. Cisco has released free software
updates that address this vulnerability.

This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100922-igmp[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100922-igmp”].

Note: The September 22, 2010, Cisco IOS Software
Security Advisory bundled publication includes six Cisco Security Advisories.
Five of the advisories address vulnerabilities in Cisco IOS Software, and one
advisory addresses vulnerabilities in Cisco Unified Communications Manager.
Each advisory lists the releases that correct the vulnerability or
vulnerabilities detailed in the advisory. The table at the following URL lists
releases that correct all Cisco IOS Software vulnerabilities that have been
published on September 22, 2010, or earlier:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100922-bundle[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20100922-bundle”]

Individual publication links are in “Cisco Event Response:
Semiannual Cisco IOS Software Security Advisory Bundled Publication” at the
following link:

http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html[“http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep10.html”]