CVE-2009-0629

Cisco IOS 12.2 and 12.4 - Denial of Service via Crafted TCP Packets

Title source: llm
STIX 2.1

Description

The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5) Data-link switching (aka DLSw), (6) Remote Source-Route Bridging (RSRB), (7) Point to Point Tunneling Protocol (PPTP), (8) X.25 for Record Boundary Preservation (RBP), (9) X.25 over TCP (XOT), and (10) X.25 Routing features in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (device reload) via a series of crafted TCP packets.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1021903
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49420
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34438
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34238
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0851

Scores

EPSS 0.0403
EPSS Percentile 89.5%

Details

Status published
Products (50)
cisco/ios 12.2
cisco/ios 12.2b
cisco/ios 12.2bc
cisco/ios 12.2bw
cisco/ios 12.2bx
cisco/ios 12.2by
cisco/ios 12.2bz
cisco/ios 12.2ca
cisco/ios 12.2cx
cisco/ios 12.2cy
... and 40 more
Published Mar 27, 2009
Tracked Since Feb 18, 2026