SB2020012413 - Multiple vulnerabilities in Cisco IOS XR



SB2020012413 - Multiple vulnerabilities in Cisco IOS XR

Published: January 24, 2020

Security Bulletin ID SB2020012413
Severity
High
Patch available
NO
Number of vulnerabilities 7
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

High 86% Medium 14%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 7 secuirty vulnerabilities.


1) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2019-15989)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect processing of a Border Gateway Protocol (BGP) update message that contains a specific BGP attribute. A remote attacker can send specially crafted Border Gateway Protocol Attribute update messages and cause the BGP process to restart unexpectedly, resulting in a DoS condition.


2) Resource management error (CVE-ID: CVE-2019-16023)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted Mcast Join Originator Router Address update messages with Length parameter and perform a denial of service attack.


3) Resource management error (CVE-ID: CVE-2019-16022)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted Multicast Join Nonstandard Group update messages with Length parameter and perform a denial of service attack.


4) Resource management error (CVE-ID: CVE-2019-16021)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted Multicast Leave Source update messages and perform a denial of service attack.


5) Resource management error (CVE-ID: CVE-2019-16020)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted Multicast Leave update messages and perform a denial of service attack.


6) Resource management error (CVE-ID: CVE-2019-16019)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect processing of Border Gateway Protocol (BGP) update messages that contain crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted BGP EVPN Multicast Join Group update messages with length set to zero and perform a denial of service attack.


7) Resource management error (CVE-ID: CVE-2019-16018)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect processing of a Border Gateway Protocol (BGP) update message that contains crafted Ethernet VPN (EVPN) attributes. A remote attacker can send specially crafted Mcast Join in RR/ASBR/Retain Route target message, wait for a user on the device to display the EVPN operational routes’ status and cause the BGP process to restart unexpectedly, resulting in a DoS condition.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.