cisco-sa-20200122-ios-xr-dos: Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

Q: What is the severity of cisco-sa-20200122-ios-xr-dos?

The severity of cisco-sa-20200122-ios-xr-dos is classified as high due to its potential to cause a denial of service condition.

Q: How do I fix cisco-sa-20200122-ios-xr-dos?

To fix cisco-sa-20200122-ios-xr-dos, update the Cisco IOS XR Software to the latest patched version as recommended in the advisory.

Q: What products are affected by cisco-sa-20200122-ios-xr-dos?

Affected products by cisco-sa-20200122-ios-xr-dos include Cisco NCS560, NCS540, NCS5500, and ASR9K routers running specific vulnerable versions.

Q: Who can exploit cisco-sa-20200122-ios-xr-dos?

Cisco-sa-20200122-ios-xr-dos can be exploited by an authenticated, remote attacker.

Q: What is the impact of cisco-sa-20200122-ios-xr-dos?

The impact of cisco-sa-20200122-ios-xr-dos is a denial of service condition affecting the IS-IS routing protocol functionality.

Published Jan 22, 2020

Updated

A vulnerability in the implementation of the Intermediate System-to-Intermediate System (IS-IS) routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition in the IS-IS process. The vulnerability is due to improper handling of a Simple Network Management Protocol (SNMP) request for specific Object Identifiers (OIDs) by the IS-IS process. An attacker could exploit this vulnerability by sending a crafted SNMP request to the affected device. A successful exploit could allow the attacker to cause a DoS condition in the IS-IS process. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-ios-xr-dos

Credit

This vulnerability was found during the resolution(a Cisco TAC support case)

Affected Software

1 affected componentFixes available

Cisco IOS XR=6.6.25, <NCS560, =6.6.25, <NCS540, =6.6.25, <NCS5500, =6.6.2, <XRV9K, =6.6.2, <ASR9K-X64, =6.6.2, <ASR9K-PX, =6.6.1, <NCS5500, =6.5.3, <XRV9K, =6.5.3, <ASR9K-PX, =6.5.3, <NCS5K, =6.5.3, <NCS540, =6.5.3, <NCS5500, =6.5.3, <ASR9K-X64, =6.5.2, <NCS5500, =6.5.2, <NCS5K, =6.5.2, <ASR9K-X64, =6.5.2, <ASR9K-PX, =6.4.2, <XRV9K, =6.4.2, <NCS6K, >=6.4.2, <=6.4.2, <NCS5K, =6.4.2, <ASR9K-X64, =6.4.2, <ASR9K-PX, =6.3.3, <NCS6K, =6.3.3, <NCS5500, =6.3.3, <NCS540, =6.3.3, <NCS5K, =6.3.3, <ASR9K-PX, =6.3.3, <ASR9K-X64, =6.3.2, <ASR9K-X64, =6.3.2, <ASR9K-PX, =6.3.15, <NCS5500, =6.2.3, <NCS6K, =6.2.3, <XRV9K, >=6.2.3, <=6.2.3, <NCS5500, =6.2.3, <ASR9K-X64, =6.2.3, <ASR9K-PX, =6.2.3, <NCS5K, =6.2.25, <NCS6K, =6.2.25, <NCS5K, =6.2.2, <NCS6K, =6.2.2, <ASR9K-PX, =6.1.4, <XRV9K, =6.1.4, <NCS5K, >=6.1.4, <=6.1.4, <NCS5500, =6.1.4, <ASR9K-PX, =6.1.3, <NCS5500, =6.1.3, <NCS5K, =6.1.3, <ASR9K-PX, =6.1.2, <ASR9K-PX, =5.2.5, <NCS6K, =4.3.2, <XR12000

NCS560NCS540NCS5500XRV9KASR9K-X64ASR9K-PXNCS5500XRV9KASR9K-PXNCS5KNCS540NCS5500ASR9K-X64NCS5500NCS5KASR9K-X64ASR9K-PXXRV9KNCS6KNCS5KASR9K-X64ASR9K-PXNCS6KNCS5500NCS540NCS5KASR9K-PXASR9K-X64ASR9K-X64ASR9K-PXNCS5500NCS6KXRV9KNCS5500ASR9K-X64ASR9K-PXNCS5KNCS6KNCS5KNCS6KASR9K-PXXRV9KNCS5KNCS5500ASR9K-PXNCS5500NCS5KASR9K-PXASR9K-PXNCS6KXR12000

Event History

Jan 22, 2020

Advisory Published

via Cisco·04:00 PM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2019-16027

Frequently Asked Questions

What is the severity of cisco-sa-20200122-ios-xr-dos?

The severity of cisco-sa-20200122-ios-xr-dos is classified as high due to its potential to cause a denial of service condition.

How do I fix cisco-sa-20200122-ios-xr-dos?