CVE-2009-2056

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path.

Score

CVSS 2.0 3.3 Low

Status

Modified - psirt@cisco.com

Published

2009-08-21

Last modified

2024-09-17

Weaknesses

CWE-264

Affected products

• Ios Xr (Cisco)

References

• http://securitytracker.com/id?1022756
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml