Cisco IOS XR Invalid Border Gateway Protocol (BGP) Update Denial of Service Vulnerability

Bugtraq ID:	36063
Class:	Unknown
CVE:	CVE-2009-2055
Remote:	Yes
Local:	No
Published:	Aug 18 2009 12:00AM
Updated:	Aug 24 2009 03:32PM
Credit:	Reported by the vendor
Vulnerable:	Cisco IOS XR 3.8.1 Cisco IOS XR 3.8 Cisco IOS XR 3.7.3 Cisco IOS XR 3.7.2 Cisco IOS XR 3.7.1 Cisco IOS XR 3.7 Cisco IOS XR 3.6.3 Cisco IOS XR 3.6.2 Cisco IOS XR 3.6.1 Cisco IOS XR 3.6 Cisco IOS XR 3.5.4 Cisco IOS XR 3.5.3 Cisco IOS XR 3.5.2 Cisco IOS XR 3.4.3 Cisco IOS XR 3.4.2 Cisco IOS XR 3.4.1 Cisco IOS XR 3.4
Not Vulnerable:

Cisco IOS XR Invalid Border Gateway Protocol (BGP) Update Denial of Service Vulnerability

Cisco IOS XR is prone to a remote denial-of-service vulnerability when receiving an invalid Border Gateway Protocol (BGP) update.

An attacker can exploit this issue to cause an affected device to restart the peering session. The resulting peering session will flap until the sender ceases to send the invalid update.

This issue is being tracked by Cisco Bug ID CSCtb42995.

Cisco IOS XR Invalid Border Gateway Protocol (BGP) Update Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS XR Invalid Border Gateway Protocol (BGP) Update Denial of Service Vulnerability

Solution:
Updates are available; please see the references for details.

Cisco IOS XR Invalid Border Gateway Protocol (BGP) Update Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerabi (Cisco)