Vulnerability in Cisco iOS

CVE-2010-0576

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and Label Distribution Protocol (LDP) are enabled, allows remote attackers to cause a denial of service (device reload or process restart) via a crafted LDP packet, aka Bug IDs CSCsz45567 and CSCsj25893.

EPSS: 0.030 (85.8th percentile) — read the EPSS interpretation.

Affected products

Cisco Ios — versions 12.2sva, 12.3yh, 12.2sv
Cisco Ios_xe — versions 2.2, 2.1, 2.3
Cisco Ios_xr — versions 3.3.3, 3.4.1, 3.2.50
N/a — versions n/a

References

psirt@cisco.com (x_refsource_OSVDB, vdb-entry)
psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)
psirt@cisco.com (vdb-entry, x_refsource_BID)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (vdb-entry, x_refsource_VUPEN)
psirt@cisco.com (vdb-entry, x_refsource_XF)