The Multicast Source Discovery Protocol (MSDP) implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service (device reload) via encapsulated IGMP data in an MSDP packet, aka Bug ID CSCtr28857.
Weakness
The product does not properly control the allocation and maintenance of a limited resource.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios | Cisco | 12.0 (including) | 12.0 (including) |
| Ios | Cisco | 12.2 (including) | 12.2 (including) |
| Ios | Cisco | 12.2(1) (including) | 12.2(1) (including) |
| Ios | Cisco | 12.2(1)dx (including) | 12.2(1)dx (including) |
| Ios | Cisco | 12.2(1)s (including) | 12.2(1)s (including) |
| Ios | Cisco | 12.2(1)t (including) | 12.2(1)t (including) |
| Ios | Cisco | 12.2(1)xa (including) | 12.2(1)xa (including) |
| Ios | Cisco | 12.2(1)xd (including) | 12.2(1)xd (including) |
| Ios | Cisco | 12.2(1)xd1 (including) | 12.2(1)xd1 (including) |
| Ios | Cisco | 12.2(1)xd3 (including) | 12.2(1)xd3 (including) |
| Ios | Cisco | 12.2(1)xd4 (including) | 12.2(1)xd4 (including) |
| Ios | Cisco | 12.2(1)xe (including) | 12.2(1)xe (including) |
| Ios | Cisco | 12.2(1)xe2 (including) | 12.2(1)xe2 (including) |
| Ios | Cisco | 12.2(1)xe3 (including) | 12.2(1)xe3 (including) |
| Ios | Cisco | 12.2(1)xh (including) | 12.2(1)xh (including) |
| Ios | Cisco | 12.2(1)xq (including) | 12.2(1)xq (including) |
| Ios | Cisco | 12.2(1)xs (including) | 12.2(1)xs (including) |
| Ios | Cisco | 12.2(1)xs1 (including) | 12.2(1)xs1 (including) |
| Ios | Cisco | 12.2(1.1) (including) | 12.2(1.1) (including) |
| Ios | Cisco | 12.2(1.1)pi (including) | 12.2(1.1)pi (including) |
| Ios | Cisco | 12.2(1.4)s (including) | 12.2(1.4)s (including) |
| Ios | Cisco | 12.2(1b) (including) | 12.2(1b) (including) |
| Ios | Cisco | 12.2(1b)da1 (including) | 12.2(1b)da1 (including) |
| Ios | Cisco | 12.2(1d) (including) | 12.2(1d) (including) |
| Ios | Cisco | 12.2(2)b (including) | 12.2(2)b (including) |
| Ios | Cisco | 12.2(2)bx (including) | 12.2(2)bx (including) |
| Ios | Cisco | 12.2(2)by (including) | 12.2(2)by (including) |
| Ios | Cisco | 12.2(2)by2 (including) | 12.2(2)by2 (including) |
| Ios | Cisco | 12.2(2)dd3 (including) | 12.2(2)dd3 (including) |
| Ios | Cisco | 12.2(2)t (including) | 12.2(2)t (including) |
| Ios | Cisco | 12.2(2)t1 (including) | 12.2(2)t1 (including) |
| Ios | Cisco | 12.2(2)t4 (including) | 12.2(2)t4 (including) |
| Ios | Cisco | 12.2(2)xa (including) | 12.2(2)xa (including) |
| Ios | Cisco | 12.2(2)xa1 (including) | 12.2(2)xa1 (including) |
| Ios | Cisco | 12.2(2)xa5 (including) | 12.2(2)xa5 (including) |
| Ios | Cisco | 12.2(2)xb (including) | 12.2(2)xb (including) |
| Ios | Cisco | 12.2(2)xb3 (including) | 12.2(2)xb3 (including) |
| Ios | Cisco | 12.2(2)xb4 (including) | 12.2(2)xb4 (including) |
| Ios | Cisco | 12.2(2)xb11 (including) | 12.2(2)xb11 (including) |
| Ios | Cisco | 12.2(2)xb14 (including) | 12.2(2)xb14 (including) |
| Ios | Cisco | 12.2(2)xb15 (including) | 12.2(2)xb15 (including) |
| Ios | Cisco | 12.2(2)xc1 (including) | 12.2(2)xc1 (including) |
| Ios | Cisco | 12.2(2)xf (including) | 12.2(2)xf (including) |
| Ios | Cisco | 12.2(2)xg (including) | 12.2(2)xg (including) |
| Ios | Cisco | 12.2(2)xh (including) | 12.2(2)xh (including) |
| Ios | Cisco | 12.2(2)xh2 (including) | 12.2(2)xh2 (including) |
| Ios | Cisco | 12.2(2)xh3 (including) | 12.2(2)xh3 (including) |
| Ios | Cisco | 12.2(2)xi (including) | 12.2(2)xi (including) |
| Ios | Cisco | 12.2(2)xi1 (including) | 12.2(2)xi1 (including) |
| Ios | Cisco | 12.2(2)xi2 (including) | 12.2(2)xi2 (including) |
| Ios | Cisco | 12.2(2)xj (including) | 12.2(2)xj (including) |
| Ios | Cisco | 12.2(2)xj1 (including) | 12.2(2)xj1 (including) |
| Ios | Cisco | 12.2(2)xk (including) | 12.2(2)xk (including) |
| Ios | Cisco | 12.2(2)xk2 (including) | 12.2(2)xk2 (including) |
| Ios | Cisco | 12.2(2)xn (including) | 12.2(2)xn (including) |
| Ios | Cisco | 12.2(2)xr (including) | 12.2(2)xr (including) |
| Ios | Cisco | 12.2(2)xt (including) | 12.2(2)xt (including) |
| Ios | Cisco | 12.2(2)xt3 (including) | 12.2(2)xt3 (including) |
| Ios | Cisco | 12.2(2)xu (including) | 12.2(2)xu (including) |
| Ios | Cisco | 12.2(2)xu2 (including) | 12.2(2)xu2 (including) |
| Ios | Cisco | 12.2(2)yc (including) | 12.2(2)yc (including) |
| Ios | Cisco | 12.2(2.2)t (including) | 12.2(2.2)t (including) |
| Ios | Cisco | 12.2(3) (including) | 12.2(3) (including) |
| Ios | Cisco | 12.2(3.4)bp (including) | 12.2(3.4)bp (including) |
| Ios | Cisco | 12.2(3d) (including) | 12.2(3d) (including) |
| Ios | Cisco | 12.2(4) (including) | 12.2(4) (including) |
| Ios | Cisco | 12.2(4)b (including) | 12.2(4)b (including) |
| Ios | Cisco | 12.2(4)b1 (including) | 12.2(4)b1 (including) |
| Ios | Cisco | 12.2(4)b2 (including) | 12.2(4)b2 (including) |
| Ios | Cisco | 12.2(4)b3 (including) | 12.2(4)b3 (including) |
| Ios | Cisco | 12.2(4)b4 (including) | 12.2(4)b4 (including) |
| Ios | Cisco | 12.2(4)bc1 (including) | 12.2(4)bc1 (including) |
| Ios | Cisco | 12.2(4)bc1a (including) | 12.2(4)bc1a (including) |
| Ios | Cisco | 12.2(4)bx (including) | 12.2(4)bx (including) |
| Ios | Cisco | 12.2(4)ja (including) | 12.2(4)ja (including) |
| Ios | Cisco | 12.2(4)ja1 (including) | 12.2(4)ja1 (including) |
| Ios | Cisco | 12.2(4)mb3 (including) | 12.2(4)mb3 (including) |
| Ios | Cisco | 12.2(4)mb12 (including) | 12.2(4)mb12 (including) |
| Ios | Cisco | 12.2(4)mb13b (including) | 12.2(4)mb13b (including) |
| Ios | Cisco | 12.2(4)mb13c (including) | 12.2(4)mb13c (including) |
| Ios | Cisco | 12.2(4)mx (including) | 12.2(4)mx (including) |
| Ios | Cisco | 12.2(4)mx1 (including) | 12.2(4)mx1 (including) |
| Ios | Cisco | 12.2(4)t (including) | 12.2(4)t (including) |
| Ios | Cisco | 12.2(4)t1 (including) | 12.2(4)t1 (including) |
| Ios | Cisco | 12.2(4)t3 (including) | 12.2(4)t3 (including) |
| Ios | Cisco | 12.2(4)t6 (including) | 12.2(4)t6 (including) |
| Ios | Cisco | 12.2(4)xl (including) | 12.2(4)xl (including) |
| Ios | Cisco | 12.2(4)xl4 (including) | 12.2(4)xl4 (including) |
| Ios | Cisco | 12.2(4)xm (including) | 12.2(4)xm (including) |
| Ios | Cisco | 12.2(4)xm2 (including) | 12.2(4)xm2 (including) |
| Ios | Cisco | 12.2(4)xr (including) | 12.2(4)xr (including) |
| Ios | Cisco | 12.2(4)xw (including) | 12.2(4)xw (including) |
| Ios | Cisco | 12.2(4)xw1 (including) | 12.2(4)xw1 (including) |
| Ios | Cisco | 12.2(4)ya (including) | 12.2(4)ya (including) |
| Ios | Cisco | 12.2(4)ya1 (including) | 12.2(4)ya1 (including) |
| Ios | Cisco | 12.2(4)ya7 (including) | 12.2(4)ya7 (including) |
| Ios | Cisco | 12.2(4)ya8 (including) | 12.2(4)ya8 (including) |
| Ios | Cisco | 12.2(4)ya9 (including) | 12.2(4)ya9 (including) |
| Ios | Cisco | 12.2(4)ya10 (including) | 12.2(4)ya10 (including) |
| Ios | Cisco | 12.2(4)ya11 (including) | 12.2(4)ya11 (including) |
| Ios | Cisco | 12.2(4)yb (including) | 12.2(4)yb (including) |
| Ios | Cisco | 12.2(5) (including) | 12.2(5) (including) |
| Ios | Cisco | 12.2(5)ca1 (including) | 12.2(5)ca1 (including) |
| Ios | Cisco | 12.2(5d) (including) | 12.2(5d) (including) |
| Ios | Cisco | 12.2(6.8)t0a (including) | 12.2(6.8)t0a (including) |
| Ios | Cisco | 12.2(6.8)t1a (including) | 12.2(6.8)t1a (including) |
| Ios | Cisco | 12.2(6.8a) (including) | 12.2(6.8a) (including) |
| Ios | Cisco | 12.2(6c) (including) | 12.2(6c) (including) |
| Ios | Cisco | 12.2(7) (including) | 12.2(7) (including) |
| Ios | Cisco | 12.2(7)da (including) | 12.2(7)da (including) |
| Ios | Cisco | 12.2(7.4)s (including) | 12.2(7.4)s (including) |
| Ios | Cisco | 12.2(7a) (including) | 12.2(7a) (including) |
| Ios | Cisco | 12.2(7b) (including) | 12.2(7b) (including) |
| Ios | Cisco | 12.2(7c) (including) | 12.2(7c) (including) |
| Ios | Cisco | 12.2(8)bc1 (including) | 12.2(8)bc1 (including) |
| Ios | Cisco | 12.2(8)ja (including) | 12.2(8)ja (including) |
| Ios | Cisco | 12.2(8)t (including) | 12.2(8)t (including) |
| Ios | Cisco | 12.2(8)t10 (including) | 12.2(8)t10 (including) |
| Ios | Cisco | 12.2(8)tpc10a (including) | 12.2(8)tpc10a (including) |
| Ios | Cisco | 12.2(8)yd (including) | 12.2(8)yd (including) |
| Ios | Cisco | 12.2(8)yw2 (including) | 12.2(8)yw2 (including) |
| Ios | Cisco | 12.2(8)yw3 (including) | 12.2(8)yw3 (including) |
| Ios | Cisco | 12.2(8)yy (including) | 12.2(8)yy (including) |
| Ios | Cisco | 12.2(8)yy3 (including) | 12.2(8)yy3 (including) |
| Ios | Cisco | 12.2(8)zb7 (including) | 12.2(8)zb7 (including) |
| Ios | Cisco | 12.2(9)s (including) | 12.2(9)s (including) |
| Ios | Cisco | 12.2(9.4)da (including) | 12.2(9.4)da (including) |
| Ios | Cisco | 12.2(10)da2 (including) | 12.2(10)da2 (including) |
| Ios | Cisco | 12.2(10)da4 (including) | 12.2(10)da4 (including) |
| Ios | Cisco | 12.2(10.5)s (including) | 12.2(10.5)s (including) |
| Ios | Cisco | 12.2(10g) (including) | 12.2(10g) (including) |
| Ios | Cisco | 12.2(11)bc3c (including) | 12.2(11)bc3c (including) |
| Ios | Cisco | 12.2(11)ja (including) | 12.2(11)ja (including) |
| Ios | Cisco | 12.2(11)ja1 (including) | 12.2(11)ja1 (including) |
| Ios | Cisco | 12.2(11)t (including) | 12.2(11)t (including) |
| Ios | Cisco | 12.2(11)t2 (including) | 12.2(11)t2 (including) |
| Ios | Cisco | 12.2(11)t3 (including) | 12.2(11)t3 (including) |
| Ios | Cisco | 12.2(11)t8 (including) | 12.2(11)t8 (including) |
| Ios | Cisco | 12.2(11)t9 (including) | 12.2(11)t9 (including) |
| Ios | Cisco | 12.2(11)yp1 (including) | 12.2(11)yp1 (including) |
| Ios | Cisco | 12.2(11)yu (including) | 12.2(11)yu (including) |
| Ios | Cisco | 12.2(11)yv (including) | 12.2(11)yv (including) |
| Ios | Cisco | 12.2(11)yx1 (including) | 12.2(11)yx1 (including) |
| Ios | Cisco | 12.2(11)yz2 (including) | 12.2(11)yz2 (including) |
| Ios | Cisco | 12.2(12) (including) | 12.2(12) (including) |
| Ios | Cisco | 12.2(12)da3 (including) | 12.2(12)da3 (including) |
| Ios | Cisco | 12.2(12)da8 (including) | 12.2(12)da8 (including) |
| Ios | Cisco | 12.2(12)da9 (including) | 12.2(12)da9 (including) |
| Ios | Cisco | 12.2(12.02)s (including) | 12.2(12.02)s (including) |
| Ios | Cisco | 12.2(12.02)t (including) | 12.2(12.02)t (including) |
| Ios | Cisco | 12.2(12.05) (including) | 12.2(12.05) (including) |
| Ios | Cisco | 12.2(12.05)s (including) | 12.2(12.05)s (including) |
| Ios | Cisco | 12.2(12.05)t (including) | 12.2(12.05)t (including) |
| Ios | Cisco | 12.2(12b) (including) | 12.2(12b) (including) |
| Ios | Cisco | 12.2(12c) (including) | 12.2(12c) (including) |
| Ios | Cisco | 12.2(12g) (including) | 12.2(12g) (including) |
| Ios | Cisco | 12.2(12h) (including) | 12.2(12h) (including) |
| Ios | Cisco | 12.2(12i) (including) | 12.2(12i) (including) |
| Ios | Cisco | 12.2(12m) (including) | 12.2(12m) (including) |
| Ios | Cisco | 12.2(13) (including) | 12.2(13) (including) |
| Ios | Cisco | 12.2(13)ja1 (including) | 12.2(13)ja1 (including) |
| Ios | Cisco | 12.2(13)mc1 (including) | 12.2(13)mc1 (including) |
| Ios | Cisco | 12.2(13)t (including) | 12.2(13)t (including) |
| Ios | Cisco | 12.2(13)t1 (including) | 12.2(13)t1 (including) |
| Ios | Cisco | 12.2(13)t9 (including) | 12.2(13)t9 (including) |
| Ios | Cisco | 12.2(13)t14 (including) | 12.2(13)t14 (including) |
| Ios | Cisco | 12.2(13)t16 (including) | 12.2(13)t16 (including) |
| Ios | Cisco | 12.2(13)zc (including) | 12.2(13)zc (including) |
| Ios | Cisco | 12.2(13)zd (including) | 12.2(13)zd (including) |
| Ios | Cisco | 12.2(13)zd3 (including) | 12.2(13)zd3 (including) |
| Ios | Cisco | 12.2(13)zd4 (including) | 12.2(13)zd4 (including) |
| Ios | Cisco | 12.2(13)ze (including) | 12.2(13)ze (including) |
| Ios | Cisco | 12.2(13)zf (including) | 12.2(13)zf (including) |
| Ios | Cisco | 12.2(13)zg (including) | 12.2(13)zg (including) |
| Ios | Cisco | 12.2(13)zh (including) | 12.2(13)zh (including) |
| Ios | Cisco | 12.2(13)zh3 (including) | 12.2(13)zh3 (including) |
| Ios | Cisco | 12.2(13)zh8 (including) | 12.2(13)zh8 (including) |
| Ios | Cisco | 12.2(13)zj (including) | 12.2(13)zj (including) |
| Ios | Cisco | 12.2(13)zk (including) | 12.2(13)zk (including) |
| Ios | Cisco | 12.2(13)zl (including) | 12.2(13)zl (including) |
| Ios | Cisco | 12.2(13.03)b (including) | 12.2(13.03)b (including) |
| Ios | Cisco | 12.2(13a) (including) | 12.2(13a) (including) |
| Ios | Cisco | 12.2(13e) (including) | 12.2(13e) (including) |
| Ios | Cisco | 12.2(14)s (including) | 12.2(14)s (including) |
| Ios | Cisco | 12.2(14)s13 (including) | 12.2(14)s13 (including) |
| Ios | Cisco | 12.2(14)s14 (including) | 12.2(14)s14 (including) |
| Ios | Cisco | 12.2(14)s15 (including) | 12.2(14)s15 (including) |
| Ios | Cisco | 12.2(14)su2 (including) | 12.2(14)su2 (including) |
| Ios | Cisco | 12.2(14)sx1 (including) | 12.2(14)sx1 (including) |
| Ios | Cisco | 12.2(14)sy (including) | 12.2(14)sy (including) |
| Ios | Cisco | 12.2(14)sy1 (including) | 12.2(14)sy1 (including) |
| Ios | Cisco | 12.2(14)sy03 (including) | 12.2(14)sy03 (including) |
| Ios | Cisco | 12.2(14)sz (including) | 12.2(14)sz (including) |
| Ios | Cisco | 12.2(14)sz1 (including) | 12.2(14)sz1 (including) |
| Ios | Cisco | 12.2(14)sz2 (including) | 12.2(14)sz2 (including) |
| Ios | Cisco | 12.2(14)za (including) | 12.2(14)za (including) |
| Ios | Cisco | 12.2(14)za2 (including) | 12.2(14)za2 (including) |
| Ios | Cisco | 12.2(14)za8 (including) | 12.2(14)za8 (including) |
| Ios | Cisco | 12.2(14.5) (including) | 12.2(14.5) (including) |
| Ios | Cisco | 12.2(14.5)t (including) | 12.2(14.5)t (including) |
| Ios | Cisco | 12.2(15)b (including) | 12.2(15)b (including) |
| Ios | Cisco | 12.2(15)bc (including) | 12.2(15)bc (including) |
| Ios | Cisco | 12.2(15)bc1 (including) | 12.2(15)bc1 (including) |
| Ios | Cisco | 12.2(15)bc1f (including) | 12.2(15)bc1f (including) |
| Ios | Cisco | 12.2(15)bc2f (including) | 12.2(15)bc2f (including) |
| Ios | Cisco | 12.2(15)bc2h (including) | 12.2(15)bc2h (including) |
| Ios | Cisco | 12.2(15)bc2i (including) | 12.2(15)bc2i (including) |
| Ios | Cisco | 12.2(15)bx (including) | 12.2(15)bx (including) |
| Ios | Cisco | 12.2(15)bz (including) | 12.2(15)bz (including) |
| Ios | Cisco | 12.2(15)cx (including) | 12.2(15)cx (including) |
| Ios | Cisco | 12.2(15)cz3 (including) | 12.2(15)cz3 (including) |
| Ios | Cisco | 12.2(15)jk2 (including) | 12.2(15)jk2 (including) |
| Ios | Cisco | 12.2(15)jk4 (including) | 12.2(15)jk4 (including) |
| Ios | Cisco | 12.2(15)jk5 (including) | 12.2(15)jk5 (including) |
| Ios | Cisco | 12.2(15)mc1 (including) | 12.2(15)mc1 (including) |
| Ios | Cisco | 12.2(15)mc2c (including) | 12.2(15)mc2c (including) |
| Ios | Cisco | 12.2(15)mc2e (including) | 12.2(15)mc2e (including) |
| Ios | Cisco | 12.2(15)sl1 (including) | 12.2(15)sl1 (including) |
| Ios | Cisco | 12.2(15)t (including) | 12.2(15)t (including) |
| Ios | Cisco | 12.2(15)t5 (including) | 12.2(15)t5 (including) |
| Ios | Cisco | 12.2(15)t7 (including) | 12.2(15)t7 (including) |
| Ios | Cisco | 12.2(15)t8 (including) | 12.2(15)t8 (including) |
| Ios | Cisco | 12.2(15)t9 (including) | 12.2(15)t9 (including) |
| Ios | Cisco | 12.2(15)t15 (including) | 12.2(15)t15 (including) |
| Ios | Cisco | 12.2(15)t16 (including) | 12.2(15)t16 (including) |
| Ios | Cisco | 12.2(15)t17 (including) | 12.2(15)t17 (including) |
| Ios | Cisco | 12.2(15)xr (including) | 12.2(15)xr (including) |
| Ios | Cisco | 12.2(15)xr2 (including) | 12.2(15)xr2 (including) |
| Ios | Cisco | 12.2(15)ys (including) | 12.2(15)ys (including) |
| Ios | Cisco | 12.2(15)ys_1.2(1) (including) | 12.2(15)ys_1.2(1) (including) |
| Ios | Cisco | 12.2(15)zj (including) | 12.2(15)zj (including) |
| Ios | Cisco | 12.2(15)zj1 (including) | 12.2(15)zj1 (including) |
| Ios | Cisco | 12.2(15)zj2 (including) | 12.2(15)zj2 (including) |
| Ios | Cisco | 12.2(15)zj3 (including) | 12.2(15)zj3 (including) |
| Ios | Cisco | 12.2(15)zk (including) | 12.2(15)zk (including) |
| Ios | Cisco | 12.2(15)zl (including) | 12.2(15)zl (including) |
| Ios | Cisco | 12.2(15)zl1 (including) | 12.2(15)zl1 (including) |
| Ios | Cisco | 12.2(15)zn (including) | 12.2(15)zn (including) |
| Ios | Cisco | 12.2(15)zo (including) | 12.2(15)zo (including) |
| Ios | Cisco | 12.2(15.1)s (including) | 12.2(15.1)s (including) |
| Ios | Cisco | 12.2(16)b (including) | 12.2(16)b (including) |
| Ios | Cisco | 12.2(16)b1 (including) | 12.2(16)b1 (including) |
| Ios | Cisco | 12.2(16)bx (including) | 12.2(16)bx (including) |
| Ios | Cisco | 12.2(16.1)b (including) | 12.2(16.1)b (including) |
| Ios | Cisco | 12.2(16.5)s (including) | 12.2(16.5)s (including) |
| Ios | Cisco | 12.2(16f) (including) | 12.2(16f) (including) |
| Ios | Cisco | 12.2(17) (including) | 12.2(17) (including) |
| Ios | Cisco | 12.2(17)a (including) | 12.2(17)a (including) |
| Ios | Cisco | 12.2(17)zd3 (including) | 12.2(17)zd3 (including) |
| Ios | Cisco | 12.2(17a) (including) | 12.2(17a) (including) |
| Ios | Cisco | 12.2(17a)sxa (including) | 12.2(17a)sxa (including) |
| Ios | Cisco | 12.2(17b)sxa (including) | 12.2(17b)sxa (including) |
| Ios | Cisco | 12.2(17d) (including) | 12.2(17d) (including) |
| Ios | Cisco | 12.2(17d)sx (including) | 12.2(17d)sx (including) |
| Ios | Cisco | 12.2(17d)sxb (including) | 12.2(17d)sxb (including) |
| Ios | Cisco | 12.2(17d)sxb7 (including) | 12.2(17d)sxb7 (including) |
| Ios | Cisco | 12.2(17d)sxb8 (including) | 12.2(17d)sxb8 (including) |
| Ios | Cisco | 12.2(17d)sxb10 (including) | 12.2(17d)sxb10 (including) |
| Ios | Cisco | 12.2(17f) (including) | 12.2(17f) (including) |
| Ios | Cisco | 12.2(18)ew (including) | 12.2(18)ew (including) |
| Ios | Cisco | 12.2(18)ew2 (including) | 12.2(18)ew2 (including) |
| Ios | Cisco | 12.2(18)ew3 (including) | 12.2(18)ew3 (including) |
| Ios | Cisco | 12.2(18)ew5 (including) | 12.2(18)ew5 (including) |
| Ios | Cisco | 12.2(18)ewa (including) | 12.2(18)ewa (including) |
| Ios | Cisco | 12.2(18)s (including) | 12.2(18)s (including) |
| Ios | Cisco | 12.2(18)s6 (including) | 12.2(18)s6 (including) |
| Ios | Cisco | 12.2(18)s8 (including) | 12.2(18)s8 (including) |
| Ios | Cisco | 12.2(18)s9 (including) | 12.2(18)s9 (including) |
| Ios | Cisco | 12.2(18)s10 (including) | 12.2(18)s10 (including) |
| Ios | Cisco | 12.2(18)se (including) | 12.2(18)se (including) |
| Ios | Cisco | 12.2(18)so4 (including) | 12.2(18)so4 (including) |
| Ios | Cisco | 12.2(18)sv (including) | 12.2(18)sv (including) |
| Ios | Cisco | 12.2(18)sv3 (including) | 12.2(18)sv3 (including) |
| Ios | Cisco | 12.2(18)sw (including) | 12.2(18)sw (including) |
| Ios | Cisco | 12.2(18)sxd1 (including) | 12.2(18)sxd1 (including) |
| Ios | Cisco | 12.2(18)sxd4 (including) | 12.2(18)sxd4 (including) |
| Ios | Cisco | 12.2(18)sxd5 (including) | 12.2(18)sxd5 (including) |
| Ios | Cisco | 12.2(18)sxd6 (including) | 12.2(18)sxd6 (including) |
| Ios | Cisco | 12.2(18)sxd7 (including) | 12.2(18)sxd7 (including) |
| Ios | Cisco | 12.2(18)sxe (including) | 12.2(18)sxe (including) |
| Ios | Cisco | 12.2(18)sxe1 (including) | 12.2(18)sxe1 (including) |
| Ios | Cisco | 12.2(18)sxe3 (including) | 12.2(18)sxe3 (including) |
| Ios | Cisco | 12.2(18)sxf (including) | 12.2(18)sxf (including) |
| Ios | Cisco | 12.2(18.2) (including) | 12.2(18.2) (including) |
| Ios | Cisco | 12.2(19) (including) | 12.2(19) (including) |
| Ios | Cisco | 12.2(19)b (including) | 12.2(19)b (including) |
| Ios | Cisco | 12.2(20)eu (including) | 12.2(20)eu (including) |
| Ios | Cisco | 12.2(20)eu1 (including) | 12.2(20)eu1 (including) |
| Ios | Cisco | 12.2(20)eu2 (including) | 12.2(20)eu2 (including) |
| Ios | Cisco | 12.2(20)ew (including) | 12.2(20)ew (including) |
| Ios | Cisco | 12.2(20)ew2 (including) | 12.2(20)ew2 (including) |
| Ios | Cisco | 12.2(20)ew3 (including) | 12.2(20)ew3 (including) |
| Ios | Cisco | 12.2(20)ewa (including) | 12.2(20)ewa (including) |
| Ios | Cisco | 12.2(20)ewa2 (including) | 12.2(20)ewa2 (including) |
| Ios | Cisco | 12.2(20)ewa3 (including) | 12.2(20)ewa3 (including) |
| Ios | Cisco | 12.2(20)s (including) | 12.2(20)s (including) |
| Ios | Cisco | 12.2(20)s1 (including) | 12.2(20)s1 (including) |
| Ios | Cisco | 12.2(20)s2 (including) | 12.2(20)s2 (including) |
| Ios | Cisco | 12.2(20)s4 (including) | 12.2(20)s4 (including) |
| Ios | Cisco | 12.2(20)s7 (including) | 12.2(20)s7 (including) |
| Ios | Cisco | 12.2(20)s8 (including) | 12.2(20)s8 (including) |
| Ios | Cisco | 12.2(20)s9 (including) | 12.2(20)s9 (including) |
| Ios | Cisco | 12.2(20)se3 (including) | 12.2(20)se3 (including) |
| Ios | Cisco | 12.2(21) (including) | 12.2(21) (including) |
| Ios | Cisco | 12.2(21a) (including) | 12.2(21a) (including) |
| Ios | Cisco | 12.2(21b) (including) | 12.2(21b) (including) |
| Ios | Cisco | 12.2(22)ea6 (including) | 12.2(22)ea6 (including) |
| Ios | Cisco | 12.2(22)s (including) | 12.2(22)s (including) |
| Ios | Cisco | 12.2(22)s2 (including) | 12.2(22)s2 (including) |
| Ios | Cisco | 12.2(22)sv1 (including) | 12.2(22)sv1 (including) |
| Ios | Cisco | 12.2(23) (including) | 12.2(23) (including) |
| Ios | Cisco | 12.2(23)sv1 (including) | 12.2(23)sv1 (including) |
| Ios | Cisco | 12.2(23)sw (including) | 12.2(23)sw (including) |
| Ios | Cisco | 12.2(23.6) (including) | 12.2(23.6) (including) |
| Ios | Cisco | 12.2(23a) (including) | 12.2(23a) (including) |
| Ios | Cisco | 12.2(23f) (including) | 12.2(23f) (including) |
| Ios | Cisco | 12.2(24) (including) | 12.2(24) (including) |
| Ios | Cisco | 12.2(24)sv (including) | 12.2(24)sv (including) |
| Ios | Cisco | 12.2(24)sv1 (including) | 12.2(24)sv1 (including) |
| Ios | Cisco | 12.2(25)ewa (including) | 12.2(25)ewa (including) |
| Ios | Cisco | 12.2(25)ewa1 (including) | 12.2(25)ewa1 (including) |
| Ios | Cisco | 12.2(25)ewa3 (including) | 12.2(25)ewa3 (including) |
| Ios | Cisco | 12.2(25)ewa4 (including) | 12.2(25)ewa4 (including) |
| Ios | Cisco | 12.2(25)ex (including) | 12.2(25)ex (including) |
| Ios | Cisco | 12.2(25)ey (including) | 12.2(25)ey (including) |
| Ios | Cisco | 12.2(25)ey2 (including) | 12.2(25)ey2 (including) |
| Ios | Cisco | 12.2(25)ey3 (including) | 12.2(25)ey3 (including) |
| Ios | Cisco | 12.2(25)ez (including) | 12.2(25)ez (including) |
| Ios | Cisco | 12.2(25)ez1 (including) | 12.2(25)ez1 (including) |
| Ios | Cisco | 12.2(25)fx (including) | 12.2(25)fx (including) |
| Ios | Cisco | 12.2(25)fy (including) | 12.2(25)fy (including) |
| Ios | Cisco | 12.2(25)s (including) | 12.2(25)s (including) |
| Ios | Cisco | 12.2(25)s1 (including) | 12.2(25)s1 (including) |
| Ios | Cisco | 12.2(25)s3 (including) | 12.2(25)s3 (including) |
| Ios | Cisco | 12.2(25)s4 (including) | 12.2(25)s4 (including) |
| Ios | Cisco | 12.2(25)s6 (including) | 12.2(25)s6 (including) |
| Ios | Cisco | 12.2(25)se (including) | 12.2(25)se (including) |
| Ios | Cisco | 12.2(25)seb (including) | 12.2(25)seb (including) |
| Ios | Cisco | 12.2(25)seb2 (including) | 12.2(25)seb2 (including) |
| Ios | Cisco | 12.2(25)seb3 (including) | 12.2(25)seb3 (including) |
| Ios | Cisco | 12.2(25)seb4 (including) | 12.2(25)seb4 (including) |
| Ios | Cisco | 12.2(25)sec1 (including) | 12.2(25)sec1 (including) |
| Ios | Cisco | 12.2(25)sec2 (including) | 12.2(25)sec2 (including) |
| Ios | Cisco | 12.2(25)sed (including) | 12.2(25)sed (including) |
| Ios | Cisco | 12.2(25)sg (including) | 12.2(25)sg (including) |
| Ios | Cisco | 12.2(25)sv2 (including) | 12.2(25)sv2 (including) |
| Ios | Cisco | 12.2(25)sw (including) | 12.2(25)sw (including) |
| Ios | Cisco | 12.2(25)sw3a (including) | 12.2(25)sw3a (including) |
| Ios | Cisco | 12.2(25)sw4 (including) | 12.2(25)sw4 (including) |
| Ios | Cisco | 12.2(25)sw4a (including) | 12.2(25)sw4a (including) |
| Ios | Cisco | 12.2(26)sv (including) | 12.2(26)sv (including) |
| Ios | Cisco | 12.2(26)sv1 (including) | 12.2(26)sv1 (including) |
| Ios | Cisco | 12.2(26b) (including) | 12.2(26b) (including) |
| Ios | Cisco | 12.2(27)sbc (including) | 12.2(27)sbc (including) |
| Ios | Cisco | 12.2(27)sv1 (including) | 12.2(27)sv1 (including) |
| Ios | Cisco | 12.2(27b) (including) | 12.2(27b) (including) |
| Ios | Cisco | 12.2(28) (including) | 12.2(28) (including) |
| Ios | Cisco | 12.2(28c) (including) | 12.2(28c) (including) |
| Ios | Cisco | 12.2(29a) (including) | 12.2(29a) (including) |
| Ios | Cisco | 12.2(30)s1 (including) | 12.2(30)s1 (including) |
| Ios | Cisco | 12.2(31) (including) | 12.2(31) (including) |
| Ios | Cisco | 12.2b (including) | 12.2b (including) |
| Ios | Cisco | 12.2bc (including) | 12.2bc (including) |
| Ios | Cisco | 12.2bw (including) | 12.2bw (including) |
| Ios | Cisco | 12.2bx (including) | 12.2bx (including) |
| Ios | Cisco | 12.2by (including) | 12.2by (including) |
| Ios | Cisco | 12.2bz (including) | 12.2bz (including) |
| Ios | Cisco | 12.2ca (including) | 12.2ca (including) |
| Ios | Cisco | 12.2cx (including) | 12.2cx (including) |
| Ios | Cisco | 12.2cy (including) | 12.2cy (including) |
| Ios | Cisco | 12.2cz (including) | 12.2cz (including) |
| Ios | Cisco | 12.2da (including) | 12.2da (including) |
| Ios | Cisco | 12.2dd (including) | 12.2dd (including) |
| Ios | Cisco | 12.2dx (including) | 12.2dx (including) |
| Ios | Cisco | 12.2e (including) | 12.2e (including) |
| Ios | Cisco | 12.2eu (including) | 12.2eu (including) |
| Ios | Cisco | 12.2ew (including) | 12.2ew (including) |
| Ios | Cisco | 12.2ewa (including) | 12.2ewa (including) |
| Ios | Cisco | 12.2ex (including) | 12.2ex (including) |
| Ios | Cisco | 12.2ey (including) | 12.2ey (including) |
| Ios | Cisco | 12.2ez (including) | 12.2ez (including) |
| Ios | Cisco | 12.2f (including) | 12.2f (including) |
| Ios | Cisco | 12.2fx (including) | 12.2fx (including) |
| Ios | Cisco | 12.2fy (including) | 12.2fy (including) |
| Ios | Cisco | 12.2ja (including) | 12.2ja (including) |
| Ios | Cisco | 12.2jk (including) | 12.2jk (including) |
| Ios | Cisco | 12.2jx (including) | 12.2jx (including) |
| Ios | Cisco | 12.2mb (including) | 12.2mb (including) |
| Ios | Cisco | 12.2mc (including) | 12.2mc (including) |
| Ios | Cisco | 12.2mx (including) | 12.2mx (including) |
| Ios | Cisco | 12.2n (including) | 12.2n (including) |
| Ios | Cisco | 12.2pb (including) | 12.2pb (including) |
| Ios | Cisco | 12.2pi (including) | 12.2pi (including) |
| Ios | Cisco | 12.2s (including) | 12.2s (including) |
| Ios | Cisco | 12.2sa (including) | 12.2sa (including) |
| Ios | Cisco | 12.2sbc (including) | 12.2sbc (including) |
| Ios | Cisco | 12.2se (including) | 12.2se (including) |
| Ios | Cisco | 12.2sea (including) | 12.2sea (including) |
| Ios | Cisco | 12.2seb (including) | 12.2seb (including) |
| Ios | Cisco | 12.2sec (including) | 12.2sec (including) |
| Ios | Cisco | 12.2sg (including) | 12.2sg (including) |
| Ios | Cisco | 12.2sh (including) | 12.2sh (including) |
| Ios | Cisco | 12.2so (including) | 12.2so (including) |
| Ios | Cisco | 12.2su (including) | 12.2su (including) |
| Ios | Cisco | 12.2sv (including) | 12.2sv (including) |
| Ios | Cisco | 12.2sw (including) | 12.2sw (including) |
| Ios | Cisco | 12.2sx (including) | 12.2sx (including) |
| Ios | Cisco | 12.2sxa (including) | 12.2sxa (including) |
| Ios | Cisco | 12.2sxb (including) | 12.2sxb (including) |
| Ios | Cisco | 12.2sxd (including) | 12.2sxd (including) |
| Ios | Cisco | 12.2sxe (including) | 12.2sxe (including) |
| Ios | Cisco | 12.2sxf (including) | 12.2sxf (including) |
| Ios | Cisco | 12.2sy (including) | 12.2sy (including) |
| Ios | Cisco | 12.2sz (including) | 12.2sz (including) |
| Ios | Cisco | 12.2t (including) | 12.2t (including) |
| Ios | Cisco | 12.2tpc (including) | 12.2tpc (including) |
| Ios | Cisco | 12.2x (including) | 12.2x (including) |
| Ios | Cisco | 12.2xa (including) | 12.2xa (including) |
| Ios | Cisco | 12.2xb (including) | 12.2xb (including) |
| Ios | Cisco | 12.2xc (including) | 12.2xc (including) |
| Ios | Cisco | 12.2xd (including) | 12.2xd (including) |
| Ios | Cisco | 12.2xe (including) | 12.2xe (including) |
| Ios | Cisco | 12.2xf (including) | 12.2xf (including) |
| Ios | Cisco | 12.2xg (including) | 12.2xg (including) |
| Ios | Cisco | 12.2xh (including) | 12.2xh (including) |
| Ios | Cisco | 12.2xi (including) | 12.2xi (including) |
| Ios | Cisco | 12.2xj (including) | 12.2xj (including) |
| Ios | Cisco | 12.2xk (including) | 12.2xk (including) |
| Ios | Cisco | 12.2xl (including) | 12.2xl (including) |
| Ios | Cisco | 12.2xm (including) | 12.2xm (including) |
| Ios | Cisco | 12.2xn (including) | 12.2xn (including) |
| Ios | Cisco | 12.2xq (including) | 12.2xq (including) |
| Ios | Cisco | 12.2xr (including) | 12.2xr (including) |
| Ios | Cisco | 12.2xs (including) | 12.2xs (including) |
| Ios | Cisco | 12.2xt (including) | 12.2xt (including) |
| Ios | Cisco | 12.2xu (including) | 12.2xu (including) |
| Ios | Cisco | 12.2xv (including) | 12.2xv (including) |
| Ios | Cisco | 12.2xw (including) | 12.2xw (including) |
| Ios | Cisco | 12.2xz (including) | 12.2xz (including) |
| Ios | Cisco | 12.2ya (including) | 12.2ya (including) |
| Ios | Cisco | 12.2yb (including) | 12.2yb (including) |
| Ios | Cisco | 12.2yc (including) | 12.2yc (including) |
| Ios | Cisco | 12.2yd (including) | 12.2yd (including) |
| Ios | Cisco | 12.2ye (including) | 12.2ye (including) |
| Ios | Cisco | 12.2yf (including) | 12.2yf (including) |
| Ios | Cisco | 12.2yg (including) | 12.2yg (including) |
| Ios | Cisco | 12.2yh (including) | 12.2yh (including) |
| Ios | Cisco | 12.2yj (including) | 12.2yj (including) |
| Ios | Cisco | 12.2yk (including) | 12.2yk (including) |
| Ios | Cisco | 12.2yl (including) | 12.2yl (including) |
| Ios | Cisco | 12.2ym (including) | 12.2ym (including) |
| Ios | Cisco | 12.2yn (including) | 12.2yn (including) |
| Ios | Cisco | 12.2yo (including) | 12.2yo (including) |
| Ios | Cisco | 12.2yp (including) | 12.2yp (including) |
| Ios | Cisco | 12.2yq (including) | 12.2yq (including) |
| Ios | Cisco | 12.2yr (including) | 12.2yr (including) |
| Ios | Cisco | 12.2ys (including) | 12.2ys (including) |
| Ios | Cisco | 12.2yt (including) | 12.2yt (including) |
| Ios | Cisco | 12.2yu (including) | 12.2yu (including) |
| Ios | Cisco | 12.2yv (including) | 12.2yv (including) |
| Ios | Cisco | 12.2yw (including) | 12.2yw (including) |
| Ios | Cisco | 12.2yx (including) | 12.2yx (including) |
| Ios | Cisco | 12.2yy (including) | 12.2yy (including) |
| Ios | Cisco | 12.2yz (including) | 12.2yz (including) |
| Ios | Cisco | 12.2za (including) | 12.2za (including) |
| Ios | Cisco | 12.2zb (including) | 12.2zb (including) |
| Ios | Cisco | 12.2zd (including) | 12.2zd (including) |
| Ios | Cisco | 12.2ze (including) | 12.2ze (including) |
| Ios | Cisco | 12.2zf (including) | 12.2zf (including) |
| Ios | Cisco | 12.2zg (including) | 12.2zg (including) |
| Ios | Cisco | 12.2zh (including) | 12.2zh (including) |
| Ios | Cisco | 12.2zi (including) | 12.2zi (including) |
| Ios | Cisco | 12.2zj (including) | 12.2zj (including) |
| Ios | Cisco | 12.2zk (including) | 12.2zk (including) |
| Ios | Cisco | 12.2zl (including) | 12.2zl (including) |
| Ios | Cisco | 12.2zm (including) | 12.2zm (including) |
| Ios | Cisco | 12.2zn (including) | 12.2zn (including) |
| Ios | Cisco | 12.2zo (including) | 12.2zo (including) |
| Ios | Cisco | 12.2zp (including) | 12.2zp (including) |
| Ios | Cisco | 12.2zq (including) | 12.2zq (including) |
| Ios | Cisco | 12.2zu (including) | 12.2zu (including) |
| Ios | Cisco | 12.2zx (including) | 12.2zx (including) |
| Ios | Cisco | 12.2zy (including) | 12.2zy (including) |
| Ios | Cisco | 12.2zya (including) | 12.2zya (including) |
Potential Mitigations
Mitigation of resource exhaustion attacks requires that the target system either:
The first of these solutions is an issue in itself though, since it may allow attackers to prevent the use of the system by a particular valid user. If the attacker impersonates the valid user, they may be able to prevent the user from accessing the server in question.
The second solution is simply difficult to effectively institute – and even when properly done, it does not provide a full solution. It simply makes the attack require more resources on the part of the attacker.
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/147.html
- https://cwe.mitre.org/data/definitions/227.html
- https://cwe.mitre.org/data/definitions/492.html
References
- http://osvdb.org/80693
- http://secunia.com/advisories/48630
- http://secunia.com/advisories/48633
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-msdp
- http://www.securityfocus.com/bid/52759
- http://www.securitytracker.com/id?1026868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74431
- http://osvdb.org/80693
- http://secunia.com/advisories/48630
- http://secunia.com/advisories/48633
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-msdp
- http://www.securityfocus.com/bid/52759
- http://www.securitytracker.com/id?1026868
- https://exchange.xforce.ibmcloud.com/vulnerabilities/74431