CVE-2009-5038

Опубликовано: 07 янв. 2011

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Cisco IOS before 15.0(1)XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service (device reload) via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID CSCso05336.

Ссылки

http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/45764
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/64682
Third Party Advisory
VDB Entry
http://www.cisco.com/en/US/docs/ios/15_0/15_0x/15_01_XA/rn800xa.pdf
Release Notes
Vendor Advisory
http://www.securityfocus.com/bid/45764
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/64682
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*

Версия до 15.0\(1\)xa (исключая)

EPSS

Процентиль: 74%

0.00851

Низкий

7.8 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-p246-42mx-3wpf

github

почти 4 года назад