SB2020012413 - Multiple vulnerabilities in Cisco IOS XR
Published: January 24, 2020
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 7 secuirty vulnerabilities.
1) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2019-15989)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to incorrect processing of a Border Gateway Protocol (BGP) update message that contains a specific BGP attribute. A remote attacker can send specially crafted Border Gateway Protocol Attribute update messages and cause the BGP process to restart unexpectedly, resulting in a DoS condition.
2) Resource management error (CVE-ID: CVE-2019-16023)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted Mcast Join Originator Router Address update messages with Length parameter and perform a denial of service attack.
3) Resource management error (CVE-ID: CVE-2019-16022)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted Multicast Join Nonstandard Group update messages with Length parameter and perform a denial of service attack.
4) Resource management error (CVE-ID: CVE-2019-16021)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted Multicast Leave Source update messages and perform a denial of service attack.
5) Resource management error (CVE-ID: CVE-2019-16020)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted Multicast Leave update messages and perform a denial of service attack.
6) Resource management error (CVE-ID: CVE-2019-16019)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted BGP EVPN Multicast Join Group update messages with length set to zero and perform a denial of service attack.
7) Resource management error (CVE-ID: CVE-2019-16018)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to incorrect processing of a Border Gateway Protocol (BGP) update message that contains crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted Mcast Join in RR/ASBR/Retain Route target message, wait for a user on the device to display the EVPN operational routes’ status and cause the BGP process to restart unexpectedly, resulting in a DoS condition.
Remediation
Cybersecurity Help is not aware of any official remediation provided by the vendor.