CVE-2009-2866: High severity cisco ios vulnerability
Published Sep 28, 2009
·Updated
Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka Bug ID CSCsz38104.
Affected Software
72 affected components
Cisco IOS=12.2b
Cisco IOS=12.2bx
Cisco IOS=12.2cz
Cisco IOS=12.2mc
Cisco IOS=12.2t
Cisco IOS=12.2yh
Cisco IOS=12.2yj
Cisco IOS=12.2yl
Cisco IOS=12.2ym
Cisco IOS=12.2yn
Cisco IOS=12.2yt
Cisco IOS=12.2yu
Cisco IOS=12.2yv
Cisco IOS=12.2zc
Cisco IOS=12.2zd
Cisco IOS=12.2ze
Cisco IOS=12.2zf
Cisco IOS=12.2zh
Cisco IOS=12.2zl
Cisco IOS=12.2zp
Cisco IOS=12.3
Cisco IOS=12.3b
Cisco IOS=12.3jk
Cisco IOS=12.3t
Cisco IOS=12.3va
Cisco IOS=12.3xa
Cisco IOS=12.3xb
Cisco IOS=12.3xc
Cisco IOS=12.3xd
Cisco IOS=12.3xe
Cisco IOS=12.3xf
Cisco IOS=12.3xg
Cisco IOS=12.3xj
Cisco IOS=12.3xk
Cisco IOS=12.3xl
Cisco IOS=12.3xq
Cisco IOS=12.3xr
Cisco IOS=12.3xu
Cisco IOS=12.3xw
Cisco IOS=12.3xx
Cisco IOS=12.3xy
Cisco IOS=12.3xz
Cisco IOS=12.3yf
Cisco IOS=12.3yg
Cisco IOS=12.3yk
Cisco IOS=12.3ym
Cisco IOS=12.3yq
Cisco IOS=12.3ys
Cisco IOS=12.3yt
Cisco IOS=12.3yu
Cisco IOS=12.3yx
Cisco IOS=12.3yz
Cisco IOS=12.3za
Cisco IOS=12.4
Cisco IOS=12.4mr
Cisco IOS=12.4t
Cisco IOS=12.4xa
Cisco IOS=12.4xb
Cisco IOS=12.4xc
Cisco IOS=12.4xd
Cisco IOS=12.4xe
Cisco IOS=12.4xj
Cisco IOS=12.4xl
Cisco IOS=12.4xm
Cisco IOS=12.4xp
Cisco IOS=12.4xt
Cisco IOS=12.4xv
Cisco IOS=12.4xw
Cisco IOS=12.4xy
Cisco IOS=12.4xz
Cisco IOS=12.4ya
Cisco IOS=12.4yb
Remediation
Event History
Sep 28, 2009
CVE Published
via MITRE·06:20 PM
Data Sourced
via MITRE·06:20 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2866?
CVE-2009-2866 has a severity rating that allows remote attackers to cause a denial of service by sending crafted H.323 packets.
2
How do I fix CVE-2009-2866?
To fix CVE-2009-2866, upgrade to a Cisco IOS version that addresses the vulnerability as recommended in Cisco's security advisories.
3
What types of devices are affected by CVE-2009-2866?
CVE-2009-2866 affects devices running Cisco IOS versions 12.2 through 12.4.
4
Can CVE-2009-2866 be exploited remotely?
Yes, CVE-2009-2866 can be exploited remotely by attackers sending specially crafted packets.
5
What is the impact of CVE-2009-2866 on affected systems?
The impact of CVE-2009-2866 on affected systems is a denial of service, which leads to device reload and potential disruption of services.