Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios | Cisco | 11.1 (including) | 11.1 (including) |
| Ios | Cisco | 11.2 (including) | 11.2 (including) |
| Ios | Cisco | 11.3(11)b (including) | 11.3(11)b (including) |
| Ios | Cisco | 12.0(5.1)xp (including) | 12.0(5.1)xp (including) |
| Ios | Cisco | 12.0(19) (including) | 12.0(19) (including) |
| Ios | Cisco | 12.1 (including) | 12.1 (including) |
References
- http://www.kb.cert.org/vuls/id/139491
- http://www.osvdb.org/1969
- http://www.securityfocus.com/archive/1/219257
- http://www.securityfocus.com/archive/1/219305
- http://www.securityfocus.com/bid/3412
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7242
- http://www.kb.cert.org/vuls/id/139491
- http://www.osvdb.org/1969
- http://www.securityfocus.com/archive/1/219257
- http://www.securityfocus.com/archive/1/219305
- http://www.securityfocus.com/bid/3412
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7242