low3.3
CVE-2009-1154
Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message…
Impact
Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios Xr | through 3.8.1 Versions 3.4, 3.4.0, 3.4.1, 3.4.2, 3.4.3 |