Cisco IOS MPLS Forwarding Infrastructure Remote Denial of Service Vulnerability

BID:31360

Info

Cisco IOS MPLS Forwarding Infrastructure Remote Denial of Service Vulnerability

Bugtraq ID: 31360
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2008-3804
Remote: Yes
Local: No
Published: Sep 24 2008 12:00AM
Updated: Sep 24 2008 10:29PM
Credit: The vulnerability was announced by Cisco.
Vulnerable: Cisco IOS 12.4XZ
Cisco IOS 12.4XY
Cisco IOS 12.4XR
Cisco IOS 12.4XQ
Cisco IOS 12.2ZX
Cisco IOS 12.2XN
Cisco IOS 12.2SXH
Cisco IOS 12.2SW
Cisco IOS 12.2SVD
Cisco IOS 12.2SVC
Cisco IOS 12.2SVA
Cisco IOS 12.2SV
Cisco IOS 12.2SRC
Cisco IOS 12.2SRB
Cisco IOS 12.2SRA
Cisco IOS 12.2SG
Cisco IOS 12.2SEG
Cisco IOS 12.2SEE
Cisco IOS 12.2SED
Cisco IOS 12.2SE
Cisco IOS 12.2SCA
Cisco IOS 12.2SBC
Cisco IOS 12.2SB
Cisco IOS 12.2S
Cisco IOS 12.2EY
Not Vulnerable: Cisco IOS 12.4T
Cisco IOS 12.4(15)XZ1
Cisco IOS 12.4(15)XY4
Cisco IOS 12.4(15)XQ1
Cisco IOS 12.2(50)SG
Cisco IOS 12.2(46)SE
Cisco IOS 12.2(44)SE3
Cisco IOS 12.2(44)EY
Cisco IOS 12.2(33)SXH3
Cisco IOS 12.2(33)SRC1
Cisco IOS 12.2(33)SRB4
Cisco IOS 12.2(33)SCA1
Cisco IOS 12.2(33)SB
Cisco IOS 12.2(31)SB12
Cisco IOS 12.2(30)S
Cisco IOS 12.2(25)SW4
Cisco IOS 12.2(25)SEG4

Discussion

Cisco IOS MPLS Forwarding Infrastructure Remote Denial of Service Vulnerability

Cisco IOS is prone to a denial-of-service vulnerability related to the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) feature.

A successful exploit may cause an affected device to reload, denying service to legitimate users.

Exploit / POC

Cisco IOS MPLS Forwarding Infrastructure Remote Denial of Service Vulnerability

Attackers can use readily available network utilities to exploit this issue.

Solution / Fix

Cisco IOS MPLS Forwarding Infrastructure Remote Denial of Service Vulnerability

Solution:
A vendor advisory and updates are available. Please see the references for details.

References

Cisco IOS MPLS Forwarding Infrastructure Remote Denial of Service Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report