CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco IOS XE BGP EVPN Implementation Flaw Remote Denial of Service and Routing Table Corruption Vulnerability (CVE-2017-12319)
[Affected Scope] Cisco IOS XE Software releases prior to 16.3 with BGP EVPN configuration enabled
[Impact] Unauthenticated, remote attackers can trigger a device reload or corrupt the BGP routing table, leading to a complete Denial of Service (DoS) and network instability
[Mitigation] Upgrade to Cisco IOS XE Software release 16.3 or later, or disable EVPN configurations if not business-critical
Cisco IOS XR BGP Unrecognized Transitive Attribute Handling Vulnerability (CVE-2010-3035) Analysis and Mitigation Guide
[Affected Scope] Cisco IOS XR software versions 3.4.0 through 3.9.1 with the Border Gateway Protocol (BGP) routing process enabled.
[Impact] A remote attacker can trigger a denial of service (BGP peering session reset) by sending a specially crafted BGP prefix announcement, potentially disrupting global routing tables.
[Mitigation] Apply the official Cisco Software Maintenance Upgrade (SMU) or upgrade to a non-vulnerable release of Cisco IOS XR.
Cisco IOS XR BGP UPDATE Attribute Validation Denial of Service Vulnerability (CVE-2009-2055)
[Affected Scope] Cisco IOS XR Software versions 3.4.0 through 3.8.1 running on routing platforms
[Impact] Remote attackers can trigger a denial of service (BGP session reset) by sending a crafted BGP UPDATE message with an invalid attribute, leading to routing instability
[Mitigation] Apply official Cisco software patches or implement infrastructure ACLs and BGP TTL Security to restrict unauthorized BGP peer connections