High · 7.5 Known exploited CVE-2010-3035 EUVD-2010-3037GHSA-9q29-g37m-5wmp

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote att…

Published Aug 30, 2010 · Updated Jan 12, 2026 · Assigned by cisco

Description

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

References

ciscoiosxr-bgp-packet-dos(61443) vdb-entry
1024371 vdb-entry
20100827 Cisco IOS XR Software Border Gateway Protocol Vulnerability vendor-advisory
[nanog] 20100827 Did your BGP crash today? mailing-list
41190 third-party-advisory
ADV-2010-2227 vdb-entry
67696 vdb-entry