cisco-sa-xr-cp-dos-ej8VB9QY: Cisco IOS XR Software Slow Path Forwarding Denial of Service Vulnerability
First published: Tue Nov 10 2020(Updated: )
A vulnerability in the egress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers and Cisco Network Convergence System (NCS) 5000 Series Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper resource allocation when an affected device processes network traffic in software switching mode. An attacker could exploit this vulnerability by sending specific streams of Layer 2 or Layer 3 protocol data units (PDUs) to an affected device. A successful exploit could cause the affected device to run out of buffer resources, which could make the device unable to process or forward traffic, resulting in a DoS condition. The device would need to be restarted to regain functionality. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xr-cp-dos-ej8VB9QY
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XR Software | =6.6.3<asr9k-px-6.6.3.CSCvv09115=6.6.2<asr9k-px-6.6.2.CSCvv09115=6.5.3<asr9k-px-6.5.3.CSCvv09115=6.5.2<asr9k-px-6.5.2.CSCvv09115=6.4.2<asr9k-px-6.4.2.CSCvv09115=6.3.3<asr9k-px-6.3.3.CSCvv09115=6.3.2<asr9k-px-6.3.2.CSCvv09115=6.2.3<asr9k-px-6.2.3.CSCvv09115=6.2.2<asr9k-px-6.2.2.CSCvv09115=6.2.1<asr9k-px-6.2.1.CSCvv09115=6.1.4<asr9k-px-6.1.4.CSCvv09115=5.3.4<asr9k-px-5.3.4.CSCvv09115=5.3.3<asr9k-px-5.3.3.CSCvv09115=5.3.2<asr9k-px-5.3.2.CSCvv09115 | asr9k-px-6.6.3.CSCvv09115 asr9k-px-6.6.2.CSCvv09115 asr9k-px-6.5.3.CSCvv09115 asr9k-px-6.5.2.CSCvv09115 asr9k-px-6.4.2.CSCvv09115 asr9k-px-6.3.3.CSCvv09115 asr9k-px-6.3.2.CSCvv09115 asr9k-px-6.2.3.CSCvv09115 asr9k-px-6.2.2.CSCvv09115 asr9k-px-6.2.1.CSCvv09115 asr9k-px-6.1.4.CSCvv09115 asr9k-px-5.3.4.CSCvv09115 asr9k-px-5.3.3.CSCvv09115 asr9k-px-5.3.2.CSCvv09115 |
| Cisco IOS XR Software | =7.1.15<asr9k-x64-7.1.15.CSCvv09115=7.0.2<asr9k-x64-7.0.2.CSCvv09115=6.6.3<asr9k-x64-6.6.3.CSCvv09115=6.6.2<asr9k-x64-6.6.2.CSCvv09115=6.5.3<asr9k-x64-6.5.3.CSCvv09115=6.4.2<asr9k-x64-6.4.2.CSCvv09115=6.4.1<asr9k-x64-6.4.1.CSCvv09115=6.3.3<asr9k-x64-6.3.3.CSCvv09115=6.2.3<asr9k-x64-6.2.3.CSCvv09115 | asr9k-x64-7.1.15.CSCvv09115 asr9k-x64-7.0.2.CSCvv09115 asr9k-x64-6.6.3.CSCvv09115 asr9k-x64-6.6.2.CSCvv09115 asr9k-x64-6.5.3.CSCvv09115 asr9k-x64-6.4.2.CSCvv09115 asr9k-x64-6.4.1.CSCvv09115 asr9k-x64-6.3.3.CSCvv09115 asr9k-x64-6.2.3.CSCvv09115 |
| Cisco IOS XR Software | =7.1.2<ncs5k-7.1.2.CSCvw46865=6.6.3<ncs5k-6.6.3.CSCvw46865=6.5.3<ncs5k-6.5.3.CSCvw46865 | ncs5k-7.1.2.CSCvw46865 ncs5k-6.6.3.CSCvw46865 ncs5k-6.5.3.CSCvw46865 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco IOS XR Software vulnerability?
The vulnerability ID for this Cisco IOS XR Software vulnerability is cisco-sa-xr-cp-dos-ej8VB9QY.
What is the severity of the Cisco IOS XR Software Slow Path Forwarding Denial of Service vulnerability?
The severity of the Cisco IOS XR Software Slow Path Forwarding Denial of Service vulnerability is high.
Which devices are affected by this vulnerability?
This vulnerability affects Cisco ASR 9000 Series Aggregation Services Routers and Cisco Network Convergence System (NCS) 5000 Series Routers.
What is the impact of this vulnerability?
This vulnerability could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on the Cisco Security Advisory page: [link](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xr-cp-dos-ej8VB9QY).
- agent/type
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/severity
- agent/title
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/softwarecombine
- agent/author
- agent/description
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco ios xr software
- version/cisco ios xr software/6.6.3
- version/cisco ios xr software/6.6.2
- version/cisco ios xr software/6.5.3
- version/cisco ios xr software/6.5.2
- version/cisco ios xr software/6.4.2
- version/cisco ios xr software/6.3.3
- version/cisco ios xr software/6.3.2
- version/cisco ios xr software/6.2.3
- version/cisco ios xr software/6.2.2
- version/cisco ios xr software/6.2.1
- version/cisco ios xr software/6.1.4
- version/cisco ios xr software/5.3.4
- version/cisco ios xr software/5.3.3
- version/cisco ios xr software/5.3.2
- version/cisco ios xr software/7.1.15
- version/cisco ios xr software/7.0.2
- version/cisco ios xr software/6.4.1
- version/cisco ios xr software/7.1.2