Vulnerability in Cisco iOS Xr

CVE-2009-2056

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path.

EPSS: 0.013 (68.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Ios_xr — versions 3.0, 3.0.1, 3.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)