Cisco IOS XR Packet Processing Flaw Vulnerability

Last Update Date: 31 May 2012 15:29 Release Date: 31 May 2012 4897 Views

RISK: Medium Risk

TYPE: Servers - Network Management

A vulnerability has been identified in Cisco IOS XR. A remote user can cause denial of service conditions.

A remote user can send a specially crafted packet to the target device to cause the route processor to be unable to transmit route processor-based protocol packets to the fabric.

IP traffic transiting the device cannot trigger the flaw.

Impact

Denial of Service

System / Technologies affected

Cisco IOS XR 4.0.3, 4.0.4, 4.1.0, 4.1.1, 4.1.2, and 4.2.0

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120530-iosxr

Vulnerability Identifier

CVE-2012-2488

Source

SecurityTracker