CVE-2012-4617
Cisco IOS, IOS XE, and IOS XR - Denial of Service via Malformed BGP Attribute
Title source: llmDescription
The BGP implementation in Cisco IOS 15.2, IOS XE 3.5.xS before 3.5.2S, and IOS XR 4.1.0 through 4.2.2 allows remote attackers to cause a denial of service (multiple connection resets) by leveraging a peer relationship and sending a malformed attribute, aka Bug IDs CSCtt35379, CSCty58300, CSCtz63248, and CSCtz62914.
References (3)
Core 3
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120926-bgp
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/55694
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1027576
Scores
EPSS
0.0232
EPSS Percentile
81.4%
Details
CWE
CWE-20
Status
published
Products (9)
cisco/ios
15.2
cisco/ios_xe
3.5.0s
cisco/ios_xe
3.5.1s
cisco/ios_xr
4.1
cisco/ios_xr
4.1.1
cisco/ios_xr
4.1.2
cisco/ios_xr
4.2.0
cisco/ios_xr
4.2.1
cisco/ios_xr
4.2.2
Published
Sep 27, 2012
Tracked Since
Feb 18, 2026