Lucene search
CiscoCISCO-SA-IOS-BGP-EVPN-DOS-LNFYJXFFHistorySep 24, 2020 - 4:00 p.m.
Cisco IOS and IOS XE Software MP-BGP EVPN Denial of Service Vulnerability
2020-09-2416:00:00
tools.cisco.com
10
0.002 Low
EPSS
Percentile
52.7%
A vulnerability in the implementation of Multiprotocol Border Gateway Protocol (MP-BGP) for the Layer 2 VPN (L2VPN) Ethernet VPN (EVPN) address family in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.
The vulnerability is due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted EVPN attributes. An attacker could exploit this vulnerability by sending BGP update messages with specific, malformed attributes to an affected device. A successful exploit could allow the attacker to cause an affected device to crash, resulting in a DoS condition.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-bgp-evpn-dos-LNfYJxfF [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-bgp-evpn-dos-LNfYJxfF”]
Affected configurations
Node
ciscoiosMatch15.2e
ORciscoiosMatch15.2jbx
ORciscoiosMatch15.2eb
ORciscoiosMatch15.6sn
ORciscoiosMatch15.6m
ORciscoiosMatch15.4sy
ORciscoiosMatch15.5sy
ORciscoiosMatch15.7m
ORciscoiosMatch15.8m
ORciscoiosMatch15.9m
ORciscoiosMatch15.3jk
ORciscoiosMatch15.1svr
ORciscoiosMatch15.1svs
ORciscorvs4000_softwareMatch16.3
ORciscorvs4000_softwareMatch16.4
ORciscorvs4000_softwareMatch16.5
ORciscorvs4000_softwareMatch3.9e
ORciscorvs4000_softwareMatch16.6
ORciscorvs4000_softwareMatch16.7
ORciscorvs4000_softwareMatch16.8
ORciscorvs4000_softwareMatch16.9
ORciscorvs4000_softwareMatch16.10
ORciscorvs4000_softwareMatch3.10e
ORciscorvs4000_softwareMatch16.11
ORciscorvs4000_softwareMatch16.12
ORciscorvs4000_softwareMatch3.11e
ORciscorvs4000_softwareMatch17.1
ORciscorvs4000_softwareMatch17.2
ORciscoiosMatch15.2\(5\)e1
ORciscoiosMatch15.2\(5a\)e1
ORciscoiosMatch15.2\(5\)e2
ORciscoiosMatch15.2\(6\)e
ORciscoiosMatch15.2\(5\)e2b
ORciscoiosMatch15.2\(5\)e2c
ORciscoiosMatch15.2\(6\)e0a
ORciscoiosMatch15.2\(6\)e1
ORciscoiosMatch15.2\(6\)e0c
ORciscoiosMatch15.2\(6\)e2
ORciscoiosMatch15.2\(6\)e1a
ORciscoiosMatch15.2\(6\)e1s
ORciscoiosMatch15.2\(7\)e
ORciscoiosMatch15.2\(6\)e2a
ORciscoiosMatch15.2\(7\)e1
ORciscoiosMatch15.2\(7\)e0b
ORciscoiosMatch15.2\(7\)e0s
ORciscoiosMatch15.2\(6\)e3
ORciscoiosMatch15.2\(7\)e2
ORciscoiosMatch15.2\(7a\)e0b
ORciscoiosMatch15.2\(7\)e1a
ORciscoiosMatch15.2\(6\)e4
ORciscoiosMatch15.2\(7b\)e0b
ORciscoiosMatch15.2\(4\)jbx
ORciscoiosMatch15.2\(6\)eb
ORciscoiosMatch15.6\(7\)sn3
ORciscoiosMatch15.6\(3\)m
ORciscoiosMatch15.6\(3\)m1
ORciscoiosMatch15.6\(3\)m0a
ORciscoiosMatch15.6\(3\)m1a
ORciscoiosMatch15.6\(3\)m1b
ORciscoiosMatch15.6\(3\)m2
ORciscoiosMatch15.6\(3\)m2a
ORciscoiosMatch15.6\(3\)m3
ORciscoiosMatch15.6\(3\)m3a
ORciscoiosMatch15.6\(3\)m4
ORciscoiosMatch15.6\(3\)m5
ORciscoiosMatch15.6\(3\)m6
ORciscoiosMatch15.6\(3\)m7
ORciscoiosMatch15.6\(3\)m6a
ORciscoiosMatch15.6\(3\)m6b
ORciscoiosMatch15.6\(3\)m8
ORciscoiosMatch15.4\(1\)sy
ORciscoiosMatch15.4\(1\)sy1
ORciscoiosMatch15.4\(1\)sy2
ORciscoiosMatch15.4\(1\)sy3
ORciscoiosMatch15.4\(1\)sy4
ORciscoiosMatch15.5\(1\)sy
ORciscoiosMatch15.5\(1\)sy1
ORciscoiosMatch15.5\(1\)sy2
ORciscoiosMatch15.5\(1\)sy3
ORciscoiosMatch15.5\(1\)sy4
ORciscoiosMatch15.5\(1\)sy5
ORciscoiosMatch15.7\(3\)m
ORciscoiosMatch15.7\(3\)m1
ORciscoiosMatch15.7\(3\)m0a
ORciscoiosMatch15.7\(3\)m3
ORciscoiosMatch15.7\(3\)m2
ORciscoiosMatch15.7\(3\)m4
ORciscoiosMatch15.7\(3\)m5
ORciscoiosMatch15.7\(3\)m4a
ORciscoiosMatch15.7\(3\)m4b
ORciscoiosMatch15.7\(3\)m6
ORciscoiosMatch15.8\(3\)m
ORciscoiosMatch15.8\(3\)m1
ORciscoiosMatch15.8\(3\)m0a
ORciscoiosMatch15.8\(3\)m0b
ORciscoiosMatch15.8\(3\)m2
ORciscoiosMatch15.8\(3\)m1a
ORciscoiosMatch15.8\(3\)m3
ORciscoiosMatch15.8\(3\)m2a
ORciscoiosMatch15.8\(3\)m4
ORciscoiosMatch15.8\(3\)m3a
ORciscoiosMatch15.8\(3\)m3b
ORciscoiosMatch15.9\(3\)m
ORciscoiosMatch15.9\(3\)m1
ORciscoiosMatch15.9\(3\)m0a
ORciscoiosMatch15.3\(3\)jk99
ORciscoiosMatch15.1\(3\)svr1
ORciscoiosMatch15.1\(3\)svr2
ORciscoiosMatch15.1\(3\)svs
ORciscorvs4000_softwareMatch16.3.1
ORciscorvs4000_softwareMatch16.3.2
ORciscorvs4000_softwareMatch16.3.3
ORciscorvs4000_softwareMatch16.3.1a
ORciscorvs4000_softwareMatch16.3.4
ORciscorvs4000_softwareMatch16.3.5
ORciscorvs4000_softwareMatch16.3.5b
ORciscorvs4000_softwareMatch16.3.6
ORciscorvs4000_softwareMatch16.3.7
ORciscorvs4000_softwareMatch16.3.8
ORciscorvs4000_softwareMatch16.3.9
ORciscorvs4000_softwareMatch16.3.10
ORciscorvs4000_softwareMatch16.4.1
ORciscorvs4000_softwareMatch16.4.2
ORciscorvs4000_softwareMatch16.4.3
ORciscorvs4000_softwareMatch16.5.1
ORciscorvs4000_softwareMatch16.5.1a
ORciscorvs4000_softwareMatch16.5.1b
ORciscorvs4000_softwareMatch16.5.2
ORciscorvs4000_softwareMatch16.5.3
ORciscorvs4000_softwareMatch3.9.1e
ORciscorvs4000_softwareMatch3.9.2e
ORciscorvs4000_softwareMatch3.9.2be
ORciscorvs4000_softwareMatch16.6.1
ORciscorvs4000_softwareMatch16.6.2
ORciscorvs4000_softwareMatch16.6.3
ORciscorvs4000_softwareMatch16.6.4
ORciscorvs4000_softwareMatch16.6.5
ORciscorvs4000_softwareMatch16.6.4s
ORciscorvs4000_softwareMatch16.6.4a
ORciscorvs4000_softwareMatch16.6.5a
ORciscorvs4000_softwareMatch16.6.6
ORciscorvs4000_softwareMatch16.6.5b
ORciscorvs4000_softwareMatch16.6.7
ORciscorvs4000_softwareMatch16.6.7a
ORciscorvs4000_softwareMatch16.6.8
ORciscorvs4000_softwareMatch16.7.1
ORciscorvs4000_softwareMatch16.7.1a
ORciscorvs4000_softwareMatch16.7.1b
ORciscorvs4000_softwareMatch16.7.2
ORciscorvs4000_softwareMatch16.7.3
ORciscorvs4000_softwareMatch16.7.4
ORciscorvs4000_softwareMatch16.8.1
ORciscorvs4000_softwareMatch16.8.1a
ORciscorvs4000_softwareMatch16.8.1b
ORciscorvs4000_softwareMatch16.8.1s
ORciscorvs4000_softwareMatch16.8.1c
ORciscorvs4000_softwareMatch16.8.1d
ORciscorvs4000_softwareMatch16.8.2
ORciscorvs4000_softwareMatch16.8.1e
ORciscorvs4000_softwareMatch16.8.3
ORciscorvs4000_softwareMatch16.9.1
ORciscorvs4000_softwareMatch16.9.2
ORciscorvs4000_softwareMatch16.9.1a
ORciscorvs4000_softwareMatch16.9.1b
ORciscorvs4000_softwareMatch16.9.1s
ORciscorvs4000_softwareMatch16.9.1c
ORciscorvs4000_softwareMatch16.9.1d
ORciscorvs4000_softwareMatch16.9.3
ORciscorvs4000_softwareMatch16.9.2a
ORciscorvs4000_softwareMatch16.9.2s
ORciscorvs4000_softwareMatch16.9.3h
ORciscorvs4000_softwareMatch16.9.4
ORciscorvs4000_softwareMatch16.9.3s
ORciscorvs4000_softwareMatch16.9.3a
ORciscorvs4000_softwareMatch16.9.4c
ORciscorvs4000_softwareMatch16.9.5
ORciscorvs4000_softwareMatch16.9.5f
ORciscorvs4000_softwareMatch16.10.1
ORciscorvs4000_softwareMatch16.10.1a
ORciscorvs4000_softwareMatch16.10.1b
ORciscorvs4000_softwareMatch16.10.1s
ORciscorvs4000_softwareMatch16.10.1c
ORciscorvs4000_softwareMatch16.10.1e
ORciscorvs4000_softwareMatch16.10.1d
ORciscorvs4000_softwareMatch16.10.2
ORciscorvs4000_softwareMatch16.10.1f
ORciscorvs4000_softwareMatch16.10.1g
ORciscorvs4000_softwareMatch16.10.3
ORciscorvs4000_softwareMatch3.10.0e
ORciscorvs4000_softwareMatch3.10.1e
ORciscorvs4000_softwareMatch3.10.0ce
ORciscorvs4000_softwareMatch3.10.2e
ORciscorvs4000_softwareMatch3.10.1ae
ORciscorvs4000_softwareMatch3.10.1se
ORciscorvs4000_softwareMatch3.10.3e
ORciscorvs4000_softwareMatch16.11.1
ORciscorvs4000_softwareMatch16.11.1a
ORciscorvs4000_softwareMatch16.11.1b
ORciscorvs4000_softwareMatch16.11.2
ORciscorvs4000_softwareMatch16.11.1s
ORciscorvs4000_softwareMatch16.11.1c
ORciscorvs4000_softwareMatch16.12.1
ORciscorvs4000_softwareMatch16.12.1s
ORciscorvs4000_softwareMatch16.12.1a
ORciscorvs4000_softwareMatch16.12.1c
ORciscorvs4000_softwareMatch16.12.1w
ORciscorvs4000_softwareMatch16.12.2
ORciscorvs4000_softwareMatch16.12.1y
ORciscorvs4000_softwareMatch16.12.2a
ORciscorvs4000_softwareMatch16.12.3
ORciscorvs4000_softwareMatch16.12.2s
ORciscorvs4000_softwareMatch16.12.1x
ORciscorvs4000_softwareMatch16.12.1t
ORciscorvs4000_softwareMatch16.12.2t
ORciscorvs4000_softwareMatch16.12.3a
ORciscorvs4000_softwareMatch3.11.0e
ORciscorvs4000_softwareMatch3.11.1e
ORciscorvs4000_softwareMatch3.11.2e
ORciscorvs4000_softwareMatch3.11.1ae
ORciscorvs4000_softwareMatch17.1.1
ORciscorvs4000_softwareMatch17.1.1a
ORciscorvs4000_softwareMatch17.1.1s
ORciscorvs4000_softwareMatch17.1.1t
ORciscorvs4000_softwareMatch17.2.1v
Related
nessus
nessus
Cisco IOS Software MP BGP EVPN DoS (cisco-sa-ios-bgp-evpn-dos-LNfYJxfF)
2020-10-07 00:00:00
Cisco IOS XE Software MP BGP EVPN DoS (cisco-sa-ios-bgp-evpn-dos-LNfYJxfF)
2020-10-07 00:00:00
cvelist
cvelist
cve
cve
CVE-2020-3479
2020-09-24 18:15:20
prion
prion
Race condition
2020-09-24 18:15:00
nvd
nvd
CVE-2020-3479
2020-09-24 18:15:20