Medium · 5.9 Known exploited CVE-2009-2055 EUVD-2009-2051GHSA-2j56-f322-jxrm

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an inva…

Published Aug 19, 2009 · Updated Jan 12, 2026 · Assigned by cisco

Description

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.

References

[nanog] 20090817 RE: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ? mailing-list
1022739 vdb-entry
20090818 Cisco IOS XR Software Border Gateway Protocol Vulnerability vendor-advisory