CVE-2009-0631: High severity Cisco IOS vulnerability

Published Mar 27, 2009

Updated

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, or (4) Media Gateway Control Protocol (MGCP) allows remote attackers to cause a denial of service (blocked input queue on the inbound interface) via a crafted UDP packet.

Affected Software

310 affected components

Cisco IOS=12.0

Cisco IOS=12.0da

Cisco IOS=12.0db

Cisco IOS=12.0dc

Cisco IOS=12.0s

Cisco IOS=12.0sc

Cisco IOS=12.0sl

Cisco IOS=12.0sp

Cisco IOS=12.0st

Cisco IOS=12.0sx

Cisco IOS=12.0sy

Cisco IOS=12.0sz

Cisco IOS=12.0t

Cisco IOS=12.0w

Cisco IOS=12.0wc

Cisco IOS=12.0wt

Cisco IOS=12.0wx

Cisco IOS=12.0xa

Cisco IOS=12.0xb

Cisco IOS=12.0xc

Cisco IOS=12.0xd

Cisco IOS=12.0xe

Cisco IOS=12.0xg

Cisco IOS=12.0xh

Cisco IOS=12.0xi

Cisco IOS=12.0xj

Cisco IOS=12.0xk

Cisco IOS=12.0xl

Cisco IOS=12.0xm

Cisco IOS=12.0xn

Cisco IOS=12.0xq

Cisco IOS=12.0xr

Cisco IOS=12.0xs

Cisco IOS=12.0xt

Cisco IOS=12.0xv

Cisco IOS=12.1

Cisco IOS=12.1aa

Cisco IOS=12.1ax

Cisco IOS=12.1ay

Cisco IOS=12.1az

Cisco IOS=12.1cx

Cisco IOS=12.1da

Cisco IOS=12.1db

Cisco IOS=12.1dc

Cisco IOS=12.1e

Cisco IOS=12.1ea

Cisco IOS=12.1eb

Cisco IOS=12.1ec

Cisco IOS=12.1eo

Cisco IOS=12.1eu

Cisco IOS=12.1ev

Cisco IOS=12.1ew

Cisco IOS=12.1ex

Cisco IOS=12.1ey

Cisco IOS=12.1ez

Cisco IOS=12.1ga

Cisco IOS=12.1gb

Cisco IOS=12.1t

Cisco IOS=12.1xa

Cisco IOS=12.1xb

Cisco IOS=12.1xc

Cisco IOS=12.1xd

Cisco IOS=12.1xe

Cisco IOS=12.1xf

Cisco IOS=12.1xg

Cisco IOS=12.1xh

Cisco IOS=12.1xi

Cisco IOS=12.1xj

Cisco IOS=12.1xl

Cisco IOS=12.1xm

Cisco IOS=12.1xp

Cisco IOS=12.1xq

Cisco IOS=12.1xr

Cisco IOS=12.1xs

Cisco IOS=12.1xt

Cisco IOS=12.1xu

Cisco IOS=12.1xv

Cisco IOS=12.1xw

Cisco IOS=12.1xx

Cisco IOS=12.1xy

Cisco IOS=12.1xz

Cisco IOS=12.1ya

Cisco IOS=12.1yb

Cisco IOS=12.1yc

Cisco IOS=12.1yd

Cisco IOS=12.1ye

Cisco IOS=12.1yf

Cisco IOS=12.1yh

Cisco IOS=12.1yi

Cisco IOS=12.1yj

Cisco IOS=12.2

Cisco IOS=12.2b

Cisco IOS=12.2bc

Cisco IOS=12.2bw

Cisco IOS=12.2bx

Cisco IOS=12.2by

Cisco IOS=12.2bz

Cisco IOS=12.2cx

Cisco IOS=12.2cy

Cisco IOS=12.2cz

Cisco IOS=12.2da

Cisco IOS=12.2dd

Cisco IOS=12.2dx

Cisco IOS=12.2ew

Cisco IOS=12.2ewa

Cisco IOS=12.2ex

Cisco IOS=12.2ey

Cisco IOS=12.2ez

Cisco IOS=12.2fx

Cisco IOS=12.2fy

Cisco IOS=12.2fz

Cisco IOS=12.2ira

Cisco IOS=12.2irb

Cisco IOS=12.2ixa

Cisco IOS=12.2ixb

Cisco IOS=12.2ixc

Cisco IOS=12.2ixd

Cisco IOS=12.2ixe

Cisco IOS=12.2ixf

Cisco IOS=12.2ixg

Cisco IOS=12.2ja

Cisco IOS=12.2jk

Cisco IOS=12.2mb

Cisco IOS=12.2mc

Cisco IOS=12.2s

Cisco IOS=12.2sb

Cisco IOS=12.2sbc

Cisco IOS=12.2sca

Cisco IOS=12.2scb

Cisco IOS=12.2se

Cisco IOS=12.2sea

Cisco IOS=12.2seb

Cisco IOS=12.2sec

Cisco IOS=12.2sed

Cisco IOS=12.2see

Cisco IOS=12.2sef

Cisco IOS=12.2seg

Cisco IOS=12.2sg

Cisco IOS=12.2sga

Cisco IOS=12.2sm

Cisco IOS=12.2so

Cisco IOS=12.2sq

Cisco IOS=12.2sra

Cisco IOS=12.2srb

Cisco IOS=12.2src

Cisco IOS=12.2srd

Cisco IOS=12.2ste

Cisco IOS=12.2su

Cisco IOS=12.2sv

Cisco IOS=12.2sva

Cisco IOS=12.2svc

Cisco IOS=12.2svd

Cisco IOS=12.2sve

Cisco IOS=12.2sw

Cisco IOS=12.2sx

Cisco IOS=12.2sxa

Cisco IOS=12.2sxb

Cisco IOS=12.2sxd

Cisco IOS=12.2sxe

Cisco IOS=12.2sxf

Cisco IOS=12.2sxh

Cisco IOS=12.2sxi

Cisco IOS=12.2sy

Cisco IOS=12.2sz

Cisco IOS=12.2t

Cisco IOS=12.2tpc

Cisco IOS=12.2xa

Cisco IOS=12.2xb

Cisco IOS=12.2xc

Cisco IOS=12.2xd

Cisco IOS=12.2xe

Cisco IOS=12.2xf

Cisco IOS=12.2xg

Cisco IOS=12.2xh

Cisco IOS=12.2xi

Cisco IOS=12.2xj

Cisco IOS=12.2xk

Cisco IOS=12.2xl

Cisco IOS=12.2xm

Cisco IOS=12.2xn

Cisco IOS=12.2xna

Cisco IOS=12.2xnb

Cisco IOS=12.2xo

Cisco IOS=12.2xq

Cisco IOS=12.2xr

Cisco IOS=12.2xs

Cisco IOS=12.2xt

Cisco IOS=12.2xu

Cisco IOS=12.2xv

Cisco IOS=12.2xw

Cisco IOS=12.2ya

Cisco IOS=12.2yb

Cisco IOS=12.2yc

Cisco IOS=12.2yd

Cisco IOS=12.2ye

Cisco IOS=12.2yf

Cisco IOS=12.2yg

Cisco IOS=12.2yh

Cisco IOS=12.2yj

Cisco IOS=12.2yk

Cisco IOS=12.2yl

Cisco IOS=12.2ym

Cisco IOS=12.2yn

Cisco IOS=12.2yo

Cisco IOS=12.2yp

Cisco IOS=12.2yq

Cisco IOS=12.2yr

Cisco IOS=12.2yt

Cisco IOS=12.2yu

Cisco IOS=12.2yv

Cisco IOS=12.2yw

Cisco IOS=12.2yx

Cisco IOS=12.2yy

Cisco IOS=12.2yz

Cisco IOS=12.2za

Cisco IOS=12.2zb

Cisco IOS=12.2zc

Cisco IOS=12.2zd

Cisco IOS=12.2ze

Cisco IOS=12.2zf

Cisco IOS=12.2zg

Cisco IOS=12.2zh

Cisco IOS=12.2zj

Cisco IOS=12.2zl

Cisco IOS=12.2zp

Cisco IOS=12.2zu

Cisco IOS=12.2zx

Cisco IOS=12.2zy

Cisco IOS=12.2zya

Cisco IOS=12.3

Cisco IOS=12.3b

Cisco IOS=12.3bc

Cisco IOS=12.3bw

Cisco IOS=12.3ja

Cisco IOS=12.3jea

Cisco IOS=12.3jeb

Cisco IOS=12.3jec

Cisco IOS=12.3jk

Cisco IOS=12.3jl

Cisco IOS=12.3jx

Cisco IOS=12.3t

Cisco IOS=12.3tpc

Cisco IOS=12.3va

Cisco IOS=12.3xa

Cisco IOS=12.3xb

Cisco IOS=12.3xc

Cisco IOS=12.3xd

Cisco IOS=12.3xe

Cisco IOS=12.3xf

Cisco IOS=12.3xg

Cisco IOS=12.3xi

Cisco IOS=12.3xj

Cisco IOS=12.3xk

Cisco IOS=12.3xl

Cisco IOS=12.3xq

Cisco IOS=12.3xr

Cisco IOS=12.3xs

Cisco IOS=12.3xu

Cisco IOS=12.3xw

Cisco IOS=12.3xx

Cisco IOS=12.3xy

Cisco IOS=12.3xz

Cisco IOS=12.3ya

Cisco IOS=12.3yd

Cisco IOS=12.3yf

Cisco IOS=12.3yg

Cisco IOS=12.3yh

Cisco IOS=12.3yi

Cisco IOS=12.3yj

Cisco IOS=12.3yk

Cisco IOS=12.3ym

Cisco IOS=12.3yq

Cisco IOS=12.3ys

Cisco IOS=12.3yt

Cisco IOS=12.3yu

Cisco IOS=12.3yx

Cisco IOS=12.3yz

Cisco IOS=12.4

Cisco IOS=12.4ja

Cisco IOS=12.4jda

Cisco IOS=12.4jk

Cisco IOS=12.4jl

Cisco IOS=12.4jma

Cisco IOS=12.4jmb

Cisco IOS=12.4jx

Cisco IOS=12.4md

Cisco IOS=12.4mr

Cisco IOS=12.4sw

Cisco IOS=12.4t

Cisco IOS=12.4xa

Cisco IOS=12.4xb

Cisco IOS=12.4xc

Cisco IOS=12.4xd

Cisco IOS=12.4xe

Cisco IOS=12.4xf

Cisco IOS=12.4xg

Cisco IOS=12.4xj

Cisco IOS=12.4xk

Cisco IOS=12.4xl

Cisco IOS=12.4xm

Cisco IOS=12.4xn

Cisco IOS=12.4xp

Cisco IOS=12.4xq

Cisco IOS=12.4xr

Cisco IOS=12.4xt

Cisco IOS=12.4xv

Cisco IOS=12.4xw

Cisco IOS=12.4xy

Cisco IOS=12.4xz

Cisco IOS=12.4ya

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Configuration
Disable the IP Service Level Agreements (SLAs) Responder feature on affected Cisco IOS devices to mitigate the denial-of-service condition caused by crafted UDP packets.
Cisco IOS IP Service Level Agreements (SLAs) Responder enabled = disabled
Configuration
Disable Session Initiation Protocol (SIP) support on affected Cisco IOS devices if it is not required, to mitigate the denial-of-service condition caused by crafted UDP packets.
Cisco IOS Session Initiation Protocol (SIP) enabled = disabled
Configuration
Disable H.323 Annex E Call Signaling Transport on affected Cisco IOS devices if it is not required, to mitigate the denial-of-service condition caused by crafted UDP packets.
Cisco IOS H.323 Annex E Call Signaling Transport enabled = disabled
Configuration
Disable Media Gateway Control Protocol (MGCP) support on affected Cisco IOS devices if it is not required, to mitigate the denial-of-service condition caused by crafted UDP packets.
Cisco IOS Media Gateway Control Protocol (MGCP) enabled = disabled

Event History

Mar 27, 2009

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Data Sourced

via NVD·03:16 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0631?

CVE-2009-0631 is classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2009-0631?

To fix CVE-2009-0631, you should upgrade to a non-vulnerable version of Cisco IOS.

What types of configurations are affected by CVE-2009-0631?

CVE-2009-0631 affects Cisco IOS versions when configured with IP SLAs Responder, SIP, H.323 Annex E, or MGCP.

Can CVE-2009-0631 be exploited remotely?

Yes, CVE-2009-0631 can be exploited remotely by attackers, potentially leading to a denial of service.

What Cisco IOS versions are vulnerable to CVE-2009-0631?

CVE-2009-0631 affects Cisco IOS versions 12.0 through 12.4.