CVE-2008-3806: High severity cisco ios vulnerability

Published Sep 26, 2008

Updated

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3805.

Affected Software

11 affected components

Cisco IOS=12.0s

Cisco IOS=12.0sl

Cisco IOS=12.0st

Cisco IOS=12.2sb

Cisco IOS=12.2sca

Cisco IOS=12.2src

Cisco IOS=12.2zx

Cisco IOS=12.3bc

Cisco IOS=12.3t

Cisco IOS=12.3xi

Cisco IOS=12.4

Event History

Sep 26, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3806?

CVE-2008-3806 is classified as a high severity vulnerability due to its potential to cause denial of service by allowing remote attackers to reload the device.

How do I fix CVE-2008-3806?

To mitigate CVE-2008-3806, upgrade your Cisco IOS to a version that is not affected by this vulnerability.

What devices are affected by CVE-2008-3806?

CVE-2008-3806 affects Cisco 10000, uBR10012, and uBR7200 series devices running vulnerable versions of Cisco IOS.

Can CVE-2008-3806 be exploited remotely?

Yes, CVE-2008-3806 can be exploited remotely by sending crafted UDP packets to the affected devices.

What are the symptoms of CVE-2008-3806 being exploited?

Exploitation of CVE-2008-3806 may result in the device or linecard unexpectedly reloading, leading to service interruptions.