CVE-2010-2828: High severity cisco IOS vulnerability

Published Sep 23, 2010

Updated

Unspecified vulnerability in the H.323 implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 2.5.x before 2.5.2 and 2.6.x before 2.6.1, allows remote attackers to cause a denial of service (device reload) via crafted H.323 packets, aka Bug ID CSCtc73759.

Affected Software

172 affected components

cisco IOS=12.1t

cisco IOS=12.1xi

cisco IOS=12.1xj

cisco IOS=12.1xl

cisco IOS=12.1xm

cisco IOS=12.1xp

cisco IOS=12.1xq

cisco IOS=12.1xr

cisco IOS=12.1xs

cisco IOS=12.1xt

cisco IOS=12.1xu

cisco IOS=12.1xv

cisco IOS=12.1xy

cisco IOS=12.1ya

cisco IOS=12.1yb

cisco IOS=12.1yc

cisco IOS=12.1yd

cisco IOS=12.1ye

cisco IOS=12.1yf

cisco IOS=12.1yh

cisco IOS=12.1yi

cisco IOS=12.2

cisco IOS=12.2\(18\)sxf7

cisco IOS=12.2\(18\)sxf8

cisco IOS=12.2b

cisco IOS=12.2bw

cisco IOS=12.2bx

cisco IOS=12.2by

cisco IOS=12.2cz

cisco IOS=12.2dd

cisco IOS=12.2dx

cisco IOS=12.2ex

cisco IOS=12.2s

cisco IOS=12.2sb

cisco IOS=12.2sbc

cisco IOS=12.2sca

cisco IOS=12.2scb

cisco IOS=12.2scc

cisco IOS=12.2scd

cisco IOS=12.2sg

cisco IOS=12.2sra

cisco IOS=12.2srb

cisco IOS=12.2su

cisco IOS=12.2sv

cisco IOS=12.2sxa

cisco IOS=12.2sxb

cisco IOS=12.2sxd

cisco IOS=12.2sxe

cisco IOS=12.2sy

cisco IOS=12.2sz

cisco IOS=12.2t

cisco IOS=12.2tpc

cisco IOS=12.2xa

cisco IOS=12.2xb

cisco IOS=12.2xc

cisco IOS=12.2xd

cisco IOS=12.2xg

cisco IOS=12.2xh

cisco IOS=12.2xi

cisco IOS=12.2xj

cisco IOS=12.2xk

cisco IOS=12.2xl

cisco IOS=12.2xm

cisco IOS=12.2xn

cisco IOS=12.2xq

cisco IOS=12.2xs

cisco IOS=12.2xt

cisco IOS=12.2xu

cisco IOS=12.2xv

cisco IOS=12.2xw

cisco IOS=12.2ya

cisco IOS=12.2yb

cisco IOS=12.2yc

cisco IOS=12.2yd

cisco IOS=12.2ye

cisco IOS=12.2yf

cisco IOS=12.2yh

cisco IOS=12.2yj

cisco IOS=12.2yk

cisco IOS=12.2yl

cisco IOS=12.2ym

cisco IOS=12.2yn

cisco IOS=12.2yo

cisco IOS=12.2yt

cisco IOS=12.2yu

cisco IOS=12.2yv

cisco IOS=12.2yw

cisco IOS=12.2yx

cisco IOS=12.2yy

cisco IOS=12.2yz

cisco IOS=12.2zc

cisco IOS=12.2zd

cisco IOS=12.2ze

cisco IOS=12.2zf

cisco IOS=12.2zh

cisco IOS=12.2zj

cisco IOS=12.2zl

cisco IOS=12.2zp

cisco IOS=12.2zu

cisco IOS=12.2zy

cisco IOS=12.2zya

cisco IOS=12.3

cisco IOS=12.3b

cisco IOS=12.3t

cisco IOS=12.3tpc

cisco IOS=12.3va

cisco IOS=12.3xa

cisco IOS=12.3xb

cisco IOS=12.3xc

cisco IOS=12.3xd

cisco IOS=12.3xe

cisco IOS=12.3xf

cisco IOS=12.3xg

cisco IOS=12.3xi

cisco IOS=12.3xj

cisco IOS=12.3xk

cisco IOS=12.3xl

cisco IOS=12.3xq

cisco IOS=12.3xr

cisco IOS=12.3xs

cisco IOS=12.3xu

cisco IOS=12.3xw

cisco IOS=12.3xx

cisco IOS=12.3xy

cisco IOS=12.3xz

cisco IOS=12.3ya

cisco IOS=12.3yd

cisco IOS=12.3yf

cisco IOS=12.3yg

cisco IOS=12.3yh

cisco IOS=12.3yi

cisco IOS=12.3yj

cisco IOS=12.3yk

cisco IOS=12.3ym

cisco IOS=12.3yq

cisco IOS=12.3ys

cisco IOS=12.3yt

cisco IOS=12.3yu

cisco IOS=12.3yx

cisco IOS=12.3yz

cisco IOS=12.3za

cisco IOS=12.4

cisco IOS=12.4mr

cisco IOS=12.4sw

cisco IOS=12.4xa

cisco IOS=12.4xb

cisco IOS=12.4xc

cisco IOS=12.4xd

cisco IOS=12.4xf

cisco IOS=12.4xg

cisco IOS=12.4xj

cisco IOS=12.4xk

cisco IOS=12.4xl

cisco IOS=12.4xm

cisco IOS=12.4xn

cisco IOS=12.4xp

cisco IOS=12.4xt

cisco IOS=12.4xv

cisco IOS=12.4xw

cisco IOS=12.4xy

cisco IOS=12.4xz

cisco IOS=12.4ya

cisco IOS=12.4yb

cisco IOS=12.4yd

cisco IOS=12.4ye

cisco IOS=15.0m

cisco IOS=15.0xa

cisco IOS=15.1t

cisco IOS=15.1xb

Cisco IOS XE=2.5.0

Cisco IOS XE=2.5.1

Cisco IOS XE=2.6.0

Remediation

Patch Available

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4a300.shtml

Event History

Sep 23, 2010

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2828?

CVE-2010-2828 has been classified as a high-severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2010-2828?

To fix CVE-2010-2828, upgrade the affected Cisco IOS versions to the latest recommended releases that include security patches.

What devices are affected by CVE-2010-2828?

CVE-2010-2828 affects various Cisco IOS versions from 12.1 to 12.4 and 15.0 to 15.1, as well as Cisco IOS XE versions prior to 2.5.2 and 2.6.1.

What types of attacks can exploit CVE-2010-2828?

CVE-2010-2828 can be exploited by remote attackers sending crafted H.323 packets that trigger device reloads.

Is there a workaround for CVE-2010-2828?

Currently, there are no documented workarounds for CVE-2010-2828; applying the appropriate updates is recommended.