Vulnerability in N/a

CVE-2007-4286

Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (restart) and execute arbitrary code via a crafted NHRP packet.

EPSS: 0.634 (98.4th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

25238 (vdb-entry, x_refsource_BID)
26360 (x_refsource_SECUNIA, third-party-advisory)
VU#201984 (x_refsource_CERT-VN, third-party-advisory)
cisco-ios-nexthop-bo(35889) (vdb-entry, x_refsource_XF)
oval:org.mitre.oval:def:5675 (x_refsource_OVAL, signature, vdb-entry)
20070809 Cisco NHRP denial of service (cisco-sa-20070808-nhrp) (mailing-list, x_refsource_BUGTRAQ)
ADV-2007-2818 (vdb-entry, x_refsource_VUPEN)
20070808 Cisco IOS Next Hop Resolution Protocol Vulnerability (x_refsource_CISCO, vendor-advisory)
1018535 (vdb-entry, x_refsource_SECTRACK)