Security Advisory

CVE-2009-1154

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-08-21 17:00:00
Last updated 2024-09-16 22:45:31
Assigner cisco
State PUBLISHED

Description

Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute.