Overview
- Description
- Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:N/A:P
Known exploits
Data from CISA
- Vulnerability name
- Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
- Exploit added on
- Mar 25, 2022
- Exploit action due
- Apr 15, 2022
- Required action
- Apply updates per vendor instructions.
Weaknesses
- nvd@nist.gov
- CWE-20
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "75538529-611A-43B5-AC4D-089C4E2E2ACC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "00DA2581-F618-4F2A-AB65-DA23DF51AF89"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81797938-F953-42BE-B287-AA48B9860AF6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92AED038-C73F-4499-B064-F01D80DB0C64"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F992D03D-1DB8-44C1-B59D-1C09A32A2C91"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5F15240-6323-4766-801A-D887F3EA8A6B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D99DC1CF-78DC-4E59-98BA-DD84702D6467"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B9FA754-E3D2-4D80-8F4B-41139973D9FC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F497A05C-2FC5-427D-8036-2476ACA956C0"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1131A524-AA7A-4C94-9FFE-54546EA7D2CC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46D1A634-D39C-4305-8915-4AA289FB68EE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21BAB799-3150-46D8-AEA3-9FCC73203221"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99042285-94AC-4C57-8EAA-EE63C678A94A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E752AA9-CC1C-44B6-A916-A3C76A57F05C"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71CBE50E-9BD3-4F74-8C7A-BE4905090EE2"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96F48419-AF66-4B50-ACBF-9E38287A64FA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBB71A24-AA6C-4BAD-BD37-5C191751C9DF"
}
],
"operator": "OR"
}
]
}
]