CVE-2010-0577: High severity Cisco IOS vulnerability

Published Mar 25, 2010

Updated

Cisco IOS 12.2 through 12.4, when certain PMTUD, SNAT, or window-size configurations are used, allows remote attackers to cause a denial of service (infinite loop, and device reload or hang) via a TCP segment with crafted options, aka Bug ID CSCsz75186.

Affected Software

136 affected components

Cisco IOS=12.2b

Cisco IOS=12.2bc

Cisco IOS=12.2bx

Cisco IOS=12.2by

Cisco IOS=12.2bz

Cisco IOS=12.2cx

Cisco IOS=12.2cy

Cisco IOS=12.2cz

Cisco IOS=12.2jx

Cisco IOS=12.2mc

Cisco IOS=12.2t

Cisco IOS=12.2tpc

Cisco IOS=12.2xj

Cisco IOS=12.2xk

Cisco IOS=12.2xl

Cisco IOS=12.2xm

Cisco IOS=12.2xr

Cisco IOS=12.2xw

Cisco IOS=12.2ya

Cisco IOS=12.2yb

Cisco IOS=12.2yd

Cisco IOS=12.2yf

Cisco IOS=12.2yg

Cisco IOS=12.2yh

Cisco IOS=12.2yj

Cisco IOS=12.2yl

Cisco IOS=12.2ym

Cisco IOS=12.2yn

Cisco IOS=12.2yp

Cisco IOS=12.2yq

Cisco IOS=12.2yr

Cisco IOS=12.2yt

Cisco IOS=12.2yu

Cisco IOS=12.2yv

Cisco IOS=12.2yw

Cisco IOS=12.2yy

Cisco IOS=12.2zb

Cisco IOS=12.2zc

Cisco IOS=12.2zd

Cisco IOS=12.2ze

Cisco IOS=12.2zf

Cisco IOS=12.2zg

Cisco IOS=12.2zh

Cisco IOS=12.2zj

Cisco IOS=12.2zl

Cisco IOS=12.2zp

Cisco IOS=12.3

Cisco IOS=12.3b

Cisco IOS=12.3bc

Cisco IOS=12.3bw

Cisco IOS=12.3ja

Cisco IOS=12.3jea

Cisco IOS=12.3jeb

Cisco IOS=12.3jec

Cisco IOS=12.3jed

Cisco IOS=12.3jk

Cisco IOS=12.3jl

Cisco IOS=12.3jx

Cisco IOS=12.3t

Cisco IOS=12.3tpc

Cisco IOS=12.3xa

Cisco IOS=12.3xb

Cisco IOS=12.3xc

Cisco IOS=12.3xd

Cisco IOS=12.3xe

Cisco IOS=12.3xf

Cisco IOS=12.3xg

Cisco IOS=12.3xi

Cisco IOS=12.3xj

Cisco IOS=12.3xk

Cisco IOS=12.3xl

Cisco IOS=12.3xq

Cisco IOS=12.3xr

Cisco IOS=12.3xs

Cisco IOS=12.3xu

Cisco IOS=12.3xw

Cisco IOS=12.3xx

Cisco IOS=12.3xy

Cisco IOS=12.3xz

Cisco IOS=12.3ya

Cisco IOS=12.3yd

Cisco IOS=12.3yf

Cisco IOS=12.3yg

Cisco IOS=12.3yh

Cisco IOS=12.3yi

Cisco IOS=12.3yj

Cisco IOS=12.3yk

Cisco IOS=12.3ym

Cisco IOS=12.3yq

Cisco IOS=12.3ys

Cisco IOS=12.3yt

Cisco IOS=12.3yu

Cisco IOS=12.3yx

Cisco IOS=12.3yz

Cisco IOS=12.3za

Cisco IOS=12.4

Cisco IOS=12.4gc

Cisco IOS=12.4ja

Cisco IOS=12.4jda

Cisco IOS=12.4jdc

Cisco IOS=12.4jdd

Cisco IOS=12.4jk

Cisco IOS=12.4jl

Cisco IOS=12.4jma

Cisco IOS=12.4jmb

Cisco IOS=12.4jx

Cisco IOS=12.4md

Cisco IOS=12.4mda

Cisco IOS=12.4mr

Cisco IOS=12.4sw

Cisco IOS=12.4t

Cisco IOS=12.4xa

Cisco IOS=12.4xb

Cisco IOS=12.4xc

Cisco IOS=12.4xd

Cisco IOS=12.4xe

Cisco IOS=12.4xf

Cisco IOS=12.4xg

Cisco IOS=12.4xj

Cisco IOS=12.4xk

Cisco IOS=12.4xl

Cisco IOS=12.4xm

Cisco IOS=12.4xn

Cisco IOS=12.4xp

Cisco IOS=12.4xq

Cisco IOS=12.4xr

Cisco IOS=12.4xt

Cisco IOS=12.4xv

Cisco IOS=12.4xw

Cisco IOS=12.4xy

Cisco IOS=12.4xz

Cisco IOS=12.4ya

Cisco IOS=12.4yb

Cisco IOS=12.4yd

Cisco IOS=12.4ye

Cisco IOS=12.4yg

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f34.shtml

Event History

Mar 25, 2010

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

Description

Data Sourced

via NVD·09:00 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-0577?

CVE-2010-0577 is classified as a critical vulnerability due to its ability to cause a denial of service.

How do I fix CVE-2010-0577?

To mitigate CVE-2010-0577, you should upgrade your Cisco IOS to a version that addresses this vulnerability.

Which Cisco IOS versions are affected by CVE-2010-0577?

CVE-2010-0577 affects Cisco IOS versions 12.2 through 12.4, mainly when certain PMTUD, SNAT, or window-size configurations are in use.

What type of attack is associated with CVE-2010-0577?

CVE-2010-0577 allows attackers to exploit a vulnerability through crafted TCP segments, leading to an infinite loop and potential device reload or hang.

Is CVE-2010-0577 remotely exploitable?

Yes, CVE-2010-0577 can be exploited remotely, making it particularly concerning for network security.