Aller au contenu
en Se connecter
8.6 Élevée

CVE-2025-20115 A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software…

Description

A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to a memory corruption that occurs when a BGP update is created with an AS_CONFED_SEQUENCE attribute that has 255 autonomous system numbers (AS numbers). An attacker could exploit this vulnerability by sending a crafted BGP update message, or the network could be designed in such a manner that the AS_CONFED_SEQUENCE attribute grows to 255 AS numbers or more. A successful exploit could allow the attacker to cause memory corruption, which may cause the BGP process to restart, resulting in a DoS condition. To exploit this vulnerability, an attacker must control a BGP confederation speaker within the same autonomous system as the victim, or the network must be designed in such a manner that the AS_CONFED_SEQUENCE attribute grows to 255 AS numbers or more.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco IOS XR Software 24.2 24.2.1 → 24.2.20 Pas de correctif indiqué
Cisco IOS XR Software 24.1 24.1.1 → 24.1.2 Pas de correctif indiqué
Cisco IOS XR Software 7.11 7.11.1 → 7.11.21 Pas de correctif indiqué
Cisco IOS XR Software 7.10 7.10.1 → 7.10.2 Pas de correctif indiqué
Cisco IOS XR Software 7.9 7.9.1 → 7.9.21 Pas de correctif indiqué
Cisco IOS XR Software 7.8 7.8.1 → 7.8.23 Pas de correctif indiqué
Cisco IOS XR Software 7.7 7.7.1 → 7.7.21 Pas de correctif indiqué
Cisco IOS XR Software 7.6 7.6.1 → 7.6.15 Pas de correctif indiqué
Cisco IOS XR Software 7.5 7.5.1 → 7.5.52 Pas de correctif indiqué
Afficher les 10 autres branches
Produit Versions touchées Corrigé en
Cisco IOS XR Software 7.4 7.4.1 → 7.4.16 Pas de correctif indiqué
Cisco IOS XR Software 7.3 7.3.1 → 7.3.27 Pas de correctif indiqué
Cisco IOS XR Software 7.2 7.2.0 → 7.2.12 Pas de correctif indiqué
Cisco IOS XR Software 7.1 7.1.1 → 7.1.25 Pas de correctif indiqué
Cisco IOS XR Software 7.0 7.0.0 → 7.0.90 Pas de correctif indiqué
Cisco IOS XR Software 6.9 6.9.1 → 6.9.2 Pas de correctif indiqué
Cisco IOS XR Software 6.8 6.8.1 → 6.8.2 Pas de correctif indiqué
Cisco IOS XR Software 6.7 6.7.1 → 6.7.35 Pas de correctif indiqué
Cisco IOS XR Software 6.6 6.6.1 → 6.6.25 Pas de correctif indiqué
Cisco IOS XR Software 6.5 6.5.1 → 6.5.93 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Cisco IOS XR Software

Les 115 CVE de Cisco IOS XR Software →
CVE-2026-76505 A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and… 7.5 Élevée CVE-2026-20278 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… 8.8 Élevée CVE-2026-20280 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software… 8.8 Élevée CVE-2026-20279 As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering… 9.8 Critique
Suivre cette CVE