Executive Summary

Summary
Title Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability
Informations
Name cisco-sa-20110720-asr9k First vendor Publication 2011-07-08
Vendor Cisco Last vendor Modification 2011-07-20
Severity (Vendor) N/A Revision 1.0

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score 7.8 Attack Range Network
Cvss Impact Score 6.9 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Cisco 9000 Series Aggregation Services Routers (ASR) running Cisco IOS XR Software version 4.1.0 contain a vulnerability that may cause a network processor in a line card to lock up while processing an IP version 4 (IPv4) packet. As a consequence of the network processor lockup, the line card that is processing the offending packet will automatically reload.

Cisco has released a free software maintenance upgrade (SMU) to address this vulnerability.

There are no workarounds for this vulnerability.

Original Source

Url : http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8 (...)

CPE : Common Platform Enumeration

TypeDescriptionCount
Hardware 1
Hardware 1
Os 1

Open Source Vulnerability Database (OSVDB)

Id Description
73985 Cisco ASR 9000 Series Line Card IPv4 Packet Parsing Remote DoS