Cisco IOS XR Long Length Border Gateway Protocol (BGP) Update Denial of Service Vulnerability

Bugtraq ID:	36092
Class:	Unknown
CVE:	CVE-2009-1154
Remote:	Yes
Local:	No
Published:	Aug 20 2009 12:00AM
Updated:	Aug 24 2009 03:32PM
Credit:	Reported by the vendor
Vulnerable:	Cisco IOS XR 3.8.1 Cisco IOS XR 3.8 Cisco IOS XR 3.7.3 Cisco IOS XR 3.7.2 Cisco IOS XR 3.7.1 Cisco IOS XR 3.7 Cisco IOS XR 3.6.3 Cisco IOS XR 3.6.2 Cisco IOS XR 3.6.1 Cisco IOS XR 3.6 Cisco IOS XR 3.5.4 Cisco IOS XR 3.5.3 Cisco IOS XR 3.5.2 Cisco IOS XR 3.4.3 Cisco IOS XR 3.4.2 Cisco IOS XR 3.4.1 Cisco IOS XR 3.4
Not Vulnerable:

Cisco IOS XR Long Length Border Gateway Protocol (BGP) Update Denial of Service Vulnerability

Cisco IOS XR is prone to a remote denial-of-service vulnerability when sending an excessively large Border Gateway Protocol (BGP) update.

An attacker can exploit this issue to cause the BGP process to crash, creating a denial-of-service condition.

This issue is being tracked by Cisco Bug ID CSCtb05382.

Cisco IOS XR Long Length Border Gateway Protocol (BGP) Update Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS XR Long Length Border Gateway Protocol (BGP) Update Denial of Service Vulnerability

Solution:
Updates are available; please see the references for details.

Cisco IOS XR Long Length Border Gateway Protocol (BGP) Update Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerabi (Cisco)