CVE-2008-3805

Cisco IOS 12.0-12.4 - Denial of Service via Crafted UDP Packets to 127.0.0.0/8

Title source: llm
STIX 2.1

Description

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3806.

References (6)

Core 6
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31990
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1020935
Permissions Required vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2670

Scores

EPSS 0.0330
EPSS Percentile 87.2%

Details

Status published
Products (11)
cisco/ios 12.2b
cisco/ios 12.2ca
cisco/ios 12.2l
cisco/ios 12.2rc
cisco/ios 12.2s
cisco/ios 12.2t
cisco/ios 12.2zx
cisco/ios 12.3bc
cisco/ios 12.3t
cisco/ios 12.3xi
... and 1 more
Published Sep 26, 2008
Tracked Since Feb 18, 2026