Cisco Malformed HSRP Traffic Denial of Service Vulnerability
BID:4948
Info
Cisco Malformed HSRP Traffic Denial of Service Vulnerability
| Bugtraq ID: | 4948 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 05 2002 12:00AM |
| Updated: | Jun 05 2002 12:00AM |
| Credit: | Discovered by Andrew Vladimirov <[email protected]>. |
| Vulnerable: |
Cisco IOS 12.1 Cisco IOS 12.0 Cisco IOS 11.2 Cisco IOS 11.1 |
| Not Vulnerable: |
Cisco IOS 12.2 |
Discussion
Cisco Malformed HSRP Traffic Denial of Service Vulnerability
IOS is the Internet Operating System, used on Cisco routers. It is distributed and maintained by Cisco. Hot Standby Routing Protocol (HSRP) is a protocol used to allow multiple routers to dynamically act as backups in the event of router failure. HSRP traffic takes place over UDP port 1985.
A vulnerability has been reported with some Cisco products. If malformed HSRP traffic is received when HSRP support is not enabled, vulnerable products may reach high CPU utilization. Under these conditions, the router may fail to respond to additional network traffic, resulting in degraded performance and a denial of service condition.
IOS is the Internet Operating System, used on Cisco routers. It is distributed and maintained by Cisco. Hot Standby Routing Protocol (HSRP) is a protocol used to allow multiple routers to dynamically act as backups in the event of router failure. HSRP traffic takes place over UDP port 1985.
A vulnerability has been reported with some Cisco products. If malformed HSRP traffic is received when HSRP support is not enabled, vulnerable products may reach high CPU utilization. Under these conditions, the router may fail to respond to additional network traffic, resulting in degraded performance and a denial of service condition.
Exploit / POC
Cisco Malformed HSRP Traffic Denial of Service Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Cisco Malformed HSRP Traffic Denial of Service Vulnerability
Solution:
This issue is resolved in IOS version 12.2.
Solution:
This issue is resolved in IOS version 12.2.
References
Cisco Malformed HSRP Traffic Denial of Service Vulnerability
References:
References:
- Cisco Call Manager Express (Cisco Systems)