CVE-2009-2055: Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
Other sources
Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-2055?
CVE-2009-2055 is classified as a denial-of-service vulnerability that can significantly disrupt network services.
How does CVE-2009-2055 exploit Cisco IOS XR?
CVE-2009-2055 exploits the processing of BGP UPDATE messages with invalid attributes, causing affected devices to reset sessions.
What versions of Cisco IOS XR are affected by CVE-2009-2055?
CVE-2009-2055 affects Cisco IOS XR versions from 3.4.0 to 3.8.1.
How can I protect my network from CVE-2009-2055?
To protect against CVE-2009-2055, it is recommended to upgrade to a patched version of Cisco IOS XR beyond 3.8.1.
Is there a known workaround for CVE-2009-2055?
While upgrading is the best solution, using access control lists to filter malicious BGP UPDATE messages can serve as a temporary workaround for CVE-2009-2055.