Cisco IOS XR Border Gateway Protocol (BGP) Update AS Prepend Denial of Service Vulnerability

Bugtraq ID:	36093
Class:	Unknown
CVE:	CVE-2009-2056
Remote:	Yes
Local:	No
Published:	Aug 20 2009 12:00AM
Updated:	Aug 24 2009 03:32PM
Credit:	Reported by the vendor
Vulnerable:	Cisco IOS XR 3.8.1 Cisco IOS XR 3.8 Cisco IOS XR 3.7.3 Cisco IOS XR 3.7.2 Cisco IOS XR 3.7.1 Cisco IOS XR 3.7 Cisco IOS XR 3.6.3 Cisco IOS XR 3.6.2 Cisco IOS XR 3.6.1 Cisco IOS XR 3.6 Cisco IOS XR 3.5.4 Cisco IOS XR 3.5.3 Cisco IOS XR 3.5.2 Cisco IOS XR 3.4.3 Cisco IOS XR 3.4.2 Cisco IOS XR 3.4.1 Cisco IOS XR 3.4
Not Vulnerable:

Cisco IOS XR Border Gateway Protocol (BGP) Update AS Prepend Denial of Service Vulnerability

Cisco IOS XR is prone to a remote denial-of-service vulnerability when constructing a Border Gateway Protocol (BGP) update that includes a large number of AS (autonomous system) prepends.

An attacker can exploit this issue to cause the BGP process to crash, creating a denial-of-service condition.

This issue is being tracked by Cisco Bug ID CSCtb12726.

Cisco IOS XR Border Gateway Protocol (BGP) Update AS Prepend Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco IOS XR Border Gateway Protocol (BGP) Update AS Prepend Denial of Service Vulnerability

Solution:
Updates are available; please see the references for details.

Cisco IOS XR Border Gateway Protocol (BGP) Update AS Prepend Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerabi (Cisco)