Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-2055

KEV EPSS 0.77% · P74
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-2055

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco IOS XR软件BGP更新拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco IOS是美国思科（Cisco）公司为其网络设备开发的操作系统。 Cisco IOS XR软件在接收到特定的无效BGP更新时会重置BGP对等端会话。当BGP对等端发布带有特殊无效属性的前缀时会出现这个漏洞。接收到这个前缀后Cisco IOS XR设备会通过发送通知来重启对等端会话，在发送端停止发送无效的破损更新之前对等端会话会震荡。 在接收无效的更新时，接收的Cisco IOS XR软件设备会显示类似于以下的日志消息： RP/0/RP0/CPU0:Aug 17 13:47:05.896 GMT:
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-2055

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-2055

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-08-19 · 21 CVEs total

CVE-2008-7006Phpversion Free PHP VX Guestbook 'admin/backupdb.php'授权问题漏洞
CVE-2008-7015Unreal Engine Failed Memory Allocation 远程拒绝服务漏洞
CVE-2008-7014fhttpd HTTP头 未明漏洞
CVE-2008-7013Baidu Hi IM 数字错误漏洞
CVE-2008-7012Accellion File Transfer Appliance FTA 未明漏洞
CVE-2008-7011Unreal engine 文件下载 拒绝服务攻击漏洞
CVE-2008-7010SkaLinks Exchange Script 'admin/register.php'创建账号访问验证漏洞
CVE-2008-7009Checkpoint ZoneAlarm Internet安全套件multiscan.exe缓冲区溢出漏洞
CVE-2008-7008HyperStop Web Host Directory 认证绕过漏洞
CVE-2008-7007Phpversion Free PHP VX Guestbook认证绕过漏洞
CVE-2009-0682ca internet_security_suite r3 输入验证漏洞
CVE-2008-7005minb 'quote.php'PHP代码注入漏洞
CVE-2008-7004Elog Electronic Logbook 缓冲区溢出漏洞
CVE-2009-2860IBM DB2 安全漏洞
CVE-2009-2859IBM DB2 权限许可和访问控制问题漏洞
CVE-2009-2858IBM DB2 资源管理错误漏洞
CVE-2009-2857Sun Solaris文件系统与虚拟内存子系统交互拒绝服务漏洞
CVE-2009-2740CA HIPS kmxIds.sys驱动拒绝服务漏洞
CVE-2009-2627Acer AcerCtrls.APlunch ActiveX控件不安全方式调用漏洞
CVE-2009-1884Perl 数字错误漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-2055

No comments yet

Leave a comment