3.3

CVE-2009-2056

Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path.

Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Ios Xr Version <= 3.8.1
Cisco ≫ Ios Xr Version3.0
Cisco ≫ Ios Xr Version3.0.1
Cisco ≫ Ios Xr Version3.1
Cisco ≫ Ios Xr Version3.1.0
Cisco ≫ Ios Xr Version3.2
Cisco ≫ Ios Xr Version3.2.1
Cisco ≫ Ios Xr Version3.2.2
Cisco ≫ Ios Xr Version3.2.3 Editioncrs-1
Cisco ≫ Ios Xr Version3.2.3 Editionprp
Cisco ≫ Ios Xr Version3.2.4
Cisco ≫ Ios Xr Version3.2.50
Cisco ≫ Ios Xr Version3.3
Cisco ≫ Ios Xr Version3.4
Cisco ≫ Ios Xr Version3.4.0
Cisco ≫ Ios Xr Version3.4.1
Cisco ≫ Ios Xr Version3.4.2
Cisco ≫ Ios Xr Version3.4.3
Cisco ≫ Ios Xr Version3.5
Cisco ≫ Ios Xr Version3.5.2
Cisco ≫ Ios Xr Version3.5.3
Cisco ≫ Ios Xr Version3.5.4
Cisco ≫ Ios Xr Version3.6
Cisco ≫ Ios Xr Version3.6.0
Cisco ≫ Ios Xr Version3.6.1
Cisco ≫ Ios Xr Version3.6.2
Cisco ≫ Ios Xr Version3.6.3
Cisco ≫ Ios Xr Version3.7
Cisco ≫ Ios Xr Version3.7.0
Cisco ≫ Ios Xr Version3.7.1
Cisco ≫ Ios Xr Version3.7.2
Cisco ≫ Ios Xr Version3.7.3
Cisco ≫ Ios Xr Version3.8.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.47% 0.62
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.3 6.4 2.9
AV:N/AC:L/Au:M/C:N/I:N/A:P