cisco-sa-20190703-iosxr-bgp-dos: Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability
First published: Wed Jul 03 2019(Updated: )
A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to incorrect processing of certain BGP update messages. An attacker could exploit this vulnerability by sending BGP update messages that include a specific set of attributes to be processed by an affected system. A successful exploit could allow the attacker to cause the BGP process to restart unexpectedly, resulting in a DoS condition. The Cisco implementation of BGP accepts incoming BGP traffic from explicitly defined peers only. To exploit this vulnerability, the malicious BGP update message would need to come from a configured, valid BGP peer or would need to be injected by the attacker into the victim’s BGP network on an existing, valid TCP connection to a BGP peer. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-iosxr-bgp-dos
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XRv 9000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20190703-iosxr-bgp-dos?
The severity of cisco-sa-20190703-iosxr-bgp-dos is critical, indicating a high risk of denial of service.
How do I fix cisco-sa-20190703-iosxr-bgp-dos?
To fix cisco-sa-20190703-iosxr-bgp-dos, apply the necessary patches or updates provided by Cisco for affected IOS XR Software versions.
Who is affected by cisco-sa-20190703-iosxr-bgp-dos?
Users of Cisco IOS XR Software, specifically those utilizing BGP functionality, are affected by cisco-sa-20190703-iosxr-bgp-dos.
What are the potential impacts of cisco-sa-20190703-iosxr-bgp-dos?
The potential impacts of cisco-sa-20190703-iosxr-bgp-dos include unexpected system downtime and service availability disruptions.
Is authentication required to exploit cisco-sa-20190703-iosxr-bgp-dos?
No, authentication is not required to exploit cisco-sa-20190703-iosxr-bgp-dos, making it particularly dangerous.
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/author
- agent/severity
- agent/title
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xrv 9000