CVE-2010-0577

Cisco IOS 12.2-12.4 - Denial of Service via Crafted TCP Segment Options

Title source: llm
STIX 2.1

Description

Cisco IOS 12.2 through 12.4, when certain PMTUD, SNAT, or window-size configurations are used, allows remote attackers to cause a denial of service (infinite loop, and device reload or hang) via a TCP segment with crafted options, aka Bug ID CSCsz75186.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/57129
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38930
Patch, Vendor Advisory vendor-advisory x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20f34.shtml
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1023743
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/39078
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0703
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/63178

Scores

EPSS 0.0253
EPSS Percentile 83.3%

Details

CWE
CWE-399
Status published
Products (50)
cisco/ios 12.2b
cisco/ios 12.2bc
cisco/ios 12.2bx
cisco/ios 12.2by
cisco/ios 12.2bz
cisco/ios 12.2cx
cisco/ios 12.2cy
cisco/ios 12.2cz
cisco/ios 12.2jx
cisco/ios 12.2mc
... and 40 more
Published Mar 25, 2010
Tracked Since Feb 18, 2026