Path traversal

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...

CVE-2009-2056

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...

CVE-2009-1154

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...

Design/Logic Flaw

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...

CVE-2009-2056

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...

Cisco IOS XR软件BGP更新拒绝服务漏洞

CVECAN ID: CVE-2009-2055 Cisco IOS是思科网络设备所使用的互联网操作系统。 Cisco IOS XR软件在接收到特定的无效BGP更新时会重置BGP对等端会话。当BGP对等端发布带有特殊无效属性的前缀时会出现这个漏洞。接收到这个前缀后Cisco IOS XR设备会通过发送通知来重启对等端会话，在发送端停止发送无效的破损更新之前对等端会话会震荡。 在接收无效的更新时，接收的Cisco IOS XR软件设备会显示类似于以下的日志消息： RP/0/RP0/CPU0:Aug 17 13:47:05.896 GMT: bgp122:...

CVE-2009-1154: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service process crash via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute...

CVE-2009-2056: Undefined Security Weakness

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service process crash via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path...

CVE-2009-2055

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009...

CVE-2009-2055

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009...

Design/Logic Flaw

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009...

CVE-2009-2055

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009...

CVE-2009-2055

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009...

CVE-2009-2055

Cisco IOS XR (Cisco IOS XR software) versions 3.4.0–3.8.1 are affected by a BGP UPDATE handling DoS vulnerability (CVE-2009-2055). The issue allows remote attackers to cause a denial of service by sending a BGP UPDATE with an invalid attribute, resulting in a session reset of the BGP peering. Dem...

Cisco IOS XR BGP DoS

BGP session reset on malformed BGP update...

Cisco Security Advisory: Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability Advisory ID: cisco-sa-20090818-bgp http://www.cisco.com/warp/public/707/cisco-sa-20090818-bgp.shtml Revision 1.0 For Public Release 2009 Augu...

CVE-2009-2055: Improper Input Validation

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service session reset via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009...

CVE-2009-1168

Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...

Code injection

Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1 through 12.233SXI2, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows...

Memory corruption

Cisco IOS 12.032S12 through 12.032S13 and 12.033S3 through 12.033S4, 12.032SY8 through 12.032SY9, 12.233SXI1, 12.2XNC before 12.233XNC2, 12.2XND before 12.233XND1, and 12.424T1; and IOS XE 2.3 through 2.3.1t and 2.4 through 2.4.0; when RFC4893 BGP routing is enabled, allows remote attackers to...