Description
Cisco IOS XR 3.8.1 and earlier allows remote attackers to cause a denial of service (process crash) via a long BGP UPDATE message, as demonstrated by a message with many AS numbers in the AS Path Attribute.
References
- 1022756 vdb-entry
- 20090818 Cisco IOS XR Software Border Gateway Protocol Vulnerability vendor-advisory