Vulnerabilities > CVE-2010-3035 - Unspecified vulnerability in Cisco IOS XR

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

cisco

NVD

Published: 2010-08-30

Updated: 2024-07-16

Summary

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XR 3.4.0 Cisco IOS XR 3.4.1 Cisco IOS XR 3.4.2 Cisco IOS XR 3.4.3 Cisco IOS XR 3.5 Cisco IOS XR 3.5\(.0\) Cisco IOS XR 3.5\(.1\) Cisco IOS XR 3.5\(.2\) Cisco IOS XR 3.5\(.3\) Cisco IOS XR 3.5\(.4\) Cisco IOS XR 3.5.0 Cisco IOS XR 3.5.1 Cisco IOS XR 3.5.2 Cisco IOS XR 3.5.3 Cisco IOS XR 3.5.4 Cisco IOS XR 3.6 Cisco IOS XR 3.6\(.1\) Cisco IOS XR 3.6\(.2\) Cisco IOS XR 3.6\(.3\) Cisco IOS XR 3.6.0 Cisco IOS XR 3.6.1 Cisco IOS XR 3.6.2 Cisco IOS XR 3.6.3 Cisco IOS XR 3.6_Base Cisco IOS XR 3.7 Cisco IOS XR 3.7\(.1\) Cisco IOS XR 3.7\(.2\) Cisco IOS XR 3.7\(.3\) Cisco IOS XR 3.7.0 Cisco IOS XR 3.7.1 Cisco IOS XR 3.7.2 Cisco IOS XR 3.7.3 Cisco IOS XR 3.7_Base Cisco IOS XR 3.8\(.0\) Cisco IOS XR 3.8\(.1\) Cisco IOS XR 3.8\(.2\) Cisco IOS XR 3.8\(.3\) Cisco IOS XR 3.8\(.4\) Cisco IOS XR 3.8.0 Cisco IOS XR 3.8.1 Cisco IOS XR 3.8.2 Cisco IOS XR 3.8.3 Cisco IOS XR 3.8.4 Cisco IOS XR 3.9\(.0\) Cisco IOS XR 3.9\(.1\) Cisco IOS XR 3.9\(.2\) Cisco IOS XR 3.9.0 Cisco IOS XR 3.9.1	48

Summary

Vulnerable Configurations

References