high
7.8
CWE
Advisory Published
Updated

CVE-2009-2866

First published: Mon Sep 28 2009(Updated: )

Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka Bug ID CSCsz38104.

Credit: ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
Puppet Cisco IOS=12.3ym
Puppet Cisco IOS=12.3yq
Puppet Cisco IOS=12.3xr
Puppet Cisco IOS=12.4t
Puppet Cisco IOS=12.2cz
Puppet Cisco IOS=12.3xg
Puppet Cisco IOS=12.4xj
Puppet Cisco IOS=12.2zp
Puppet Cisco IOS=12.3xd
Puppet Cisco IOS=12.4xl
Puppet Cisco IOS=12.4xm
Puppet Cisco IOS=12.3xw
Puppet Cisco IOS=12.4mr
Puppet Cisco IOS=12.2b
Puppet Cisco IOS=12.4xt
Puppet Cisco IOS=12.2yn
Puppet Cisco IOS=12.2ym
Puppet Cisco IOS=12.3yu
Puppet Cisco IOS=12.3xj
Puppet Cisco IOS=12.3t
Puppet Cisco IOS=12.3
Puppet Cisco IOS=12.2zh
Puppet Cisco IOS=12.2yv
Puppet Cisco IOS=12.3va
Puppet Cisco IOS=12.2t
Puppet Cisco IOS=12.2zc
Puppet Cisco IOS=12.3xz
Puppet Cisco IOS=12.2yt
Puppet Cisco IOS=12.4ya
Puppet Cisco IOS=12.2yl
Puppet Cisco IOS=12.4xv
Puppet Cisco IOS=12.4xw
Puppet Cisco IOS=12.4xz
Puppet Cisco IOS=12.3xf
Puppet Cisco IOS=12.3xl
Puppet Cisco IOS=12.3yk
Puppet Cisco IOS=12.3yf
Puppet Cisco IOS=12.4xd
Puppet Cisco IOS=12.4xp
Puppet Cisco IOS=12.3yt
Puppet Cisco IOS=12.3xb
Puppet Cisco IOS=12.3yz
Puppet Cisco IOS=12.3yg
Puppet Cisco IOS=12.3xu
Puppet Cisco IOS=12.2zd
Puppet Cisco IOS=12.3xy
Puppet Cisco IOS=12.3xc
Puppet Cisco IOS=12.4
Puppet Cisco IOS=12.3xe
Puppet Cisco IOS=12.2ze
Puppet Cisco IOS=12.4xa
Puppet Cisco IOS=12.3za
Puppet Cisco IOS=12.2yu
Puppet Cisco IOS=12.4xe
Puppet Cisco IOS=12.3yx
Puppet Cisco IOS=12.2bx
Puppet Cisco IOS=12.3xq
Puppet Cisco IOS=12.2zl
Puppet Cisco IOS=12.3ys
Puppet Cisco IOS=12.3jk
Puppet Cisco IOS=12.2zf
Puppet Cisco IOS=12.3b
Puppet Cisco IOS=12.4yb
Puppet Cisco IOS=12.4xb
Puppet Cisco IOS=12.3xx
Puppet Cisco IOS=12.4xy
Puppet Cisco IOS=12.4xc
Puppet Cisco IOS=12.3xa
Puppet Cisco IOS=12.3xk
Puppet Cisco IOS=12.2yj
Puppet Cisco IOS=12.2mc
Puppet Cisco IOS=12.2yh

Remedy

http://tools.cisco.com/security/center/viewAlert.x?alertId=18885

Remedy

http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811a.shtml

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2009-2866?

    CVE-2009-2866 has a severity rating that allows remote attackers to cause a denial of service by sending crafted H.323 packets.

  • How do I fix CVE-2009-2866?

    To fix CVE-2009-2866, upgrade to a Cisco IOS version that addresses the vulnerability as recommended in Cisco's security advisories.

  • What types of devices are affected by CVE-2009-2866?

    CVE-2009-2866 affects devices running Cisco IOS versions 12.2 through 12.4.

  • Can CVE-2009-2866 be exploited remotely?

    Yes, CVE-2009-2866 can be exploited remotely by attackers sending specially crafted packets.

  • What is the impact of CVE-2009-2866 on affected systems?

    The impact of CVE-2009-2866 on affected systems is a denial of service, which leads to device reload and potential disruption of services.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203