First published: Thu Mar 28 2013(Updated: )
The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service (incorrect memory access and device reload) via a traffic engineering PATH message in an RSVP packet, aka Bug ID CSCtg39957.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS | =12.2 | |
Cisco IOS | =15.0 | |
Cisco IOS | =15.0\(1\)se | |
Cisco IOS | =15.1 | |
Cisco IOS | =15.2 | |
Cisco IOS | =15.3 | |
Cisco IOS XE | =3.1.0s | |
Cisco IOS XE | =3.1.1s | |
Cisco IOS XE | =3.1.2s | |
Cisco IOS XE | =3.1.3s | |
Cisco IOS XE | =3.1.4s | |
Cisco IOS XE | =3.2.0s | |
Cisco IOS XE | =3.2.1s | |
Cisco IOS XE | =3.2.2s | |
Cisco IOS XE | =3.3.0s | |
Cisco IOS XE | =3.3.1s | |
Cisco IOS XE | =3.3.2s | |
Cisco IOS XE | =3.3.3s | |
Cisco IOS XE | =3.4.0s | |
Cisco IOS XE | =3.4.1s | |
Cisco IOS XE | =3.4.2s | |
Cisco IOS XE | =3.4.3s | |
Cisco IOS XE | =3.5.0s | |
Cisco IOS XE | =3.5.1s | |
Cisco IOS XE | =3.5.2s |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.