Cisco Border Gateway Protocol Unknown Attribute Denial of Service Vulnerability

Bugtraq ID:	42821
Class:	Design Error
CVE:	CVE-2010-3035
Remote:	Yes
Local:	No
Published:	Aug 27 2010 12:00AM
Updated:	Sep 01 2010 06:37PM
Credit:	Cisco
Vulnerable:	Cisco IOS XR 3.9.1 Cisco IOS XR 3.9 Cisco IOS XR 3.8.4 Cisco IOS XR 3.8.3 Cisco IOS XR 3.8.2 Cisco IOS XR 3.8.1 Cisco IOS XR 3.8 Cisco IOS XR 3.7.3 Cisco IOS XR 3.7.2 Cisco IOS XR 3.7.1 Cisco IOS XR 3.7 Cisco IOS XR 3.6.3 Cisco IOS XR 3.6.2 Cisco IOS XR 3.6.1 Cisco IOS XR 3.6 Cisco IOS XR 3.5.4 Cisco IOS XR 3.5.3 Cisco IOS XR 3.5.2 Cisco IOS XR 3.4.3 Cisco IOS XR 3.4.2 Cisco IOS XR 3.4.1 Cisco IOS XR 3.4
Not Vulnerable:

Cisco Border Gateway Protocol Unknown Attribute Denial of Service Vulnerability

Cisco IOS XR is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected device to restart, denying service to legitimate users.

This issue is tracked by Cisco Bug ID CSCti62211.

Cisco Border Gateway Protocol Unknown Attribute Denial of Service Vulnerability

To exploit this issue, attackers can use readily available network utilities.

Cisco Border Gateway Protocol Unknown Attribute Denial of Service Vulnerability

Solution:
Vendor updates are available. Please see the referenced advisory for details.

Cisco Border Gateway Protocol Unknown Attribute Denial of Service Vulnerability

References:

• Cisco IOS Homepage (Cisco Systems)
  
• Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerabi (Cisco)