Description
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingress IS-IS packets. An attacker could exploit this vulnerability by sending crafted IS-IS packets to an affected device after forming an adjacency. A successful exploit could allow the attacker to cause the IS-IS process to restart unexpectedly, resulting in a temporary loss of connectivity to advertised networks and a denial of service (DoS) condition. Note: The IS-IS protocol is a routing protocol. To exploit this vulnerability, an attacker must be Layer 2-adjacent to the affected device and must have formed an adjacency.
CVSS breakdown
Affected products
- Cisco / Cisco IOS XR Software7.8.1 – 7.8.1
- Cisco / Cisco IOS XR Software7.9.1 – 7.9.1
- Cisco / Cisco IOS XR Software7.10.1 – 7.10.1
- Cisco / Cisco IOS XR Software7.8.2 – 7.8.2
- Cisco / Cisco IOS XR Software7.8.22 – 7.8.22
- Cisco / Cisco IOS XR Software7.9.2 – 7.9.2
- Cisco / Cisco IOS XR Software7.11.1 – 7.11.1
- Cisco / Cisco IOS XR Software7.9.21 – 7.9.21
- Cisco / Cisco IOS XR Software7.10.2 – 7.10.2
- Cisco / Cisco IOS XR Software24.1.1 – 24.1.1
- Cisco / Cisco IOS XR Software7.11.2 – 7.11.2
- Cisco / Cisco IOS XR Software24.2.1 – 24.2.1
- Cisco / Cisco IOS XR Software24.1.2 – 24.1.2
- Cisco / Cisco IOS XR Software24.2.11 – 24.2.11
- Cisco / Cisco IOS XR Software24.3.1 – 24.3.1
- Cisco / Cisco IOS XR Software24.4.1 – 24.4.1
- Cisco / Cisco IOS XR Software24.2.2 – 24.2.2
- Cisco / Cisco IOS XR Software7.8.23 – 7.8.23
- Cisco / Cisco IOS XR Software7.11.21 – 7.11.21
- Cisco / Cisco IOS XR Software24.2.20 – 24.2.20
- Cisco / Cisco IOS XR Software24.3.2 – 24.3.2
- Cisco / Cisco IOS XR Software24.4.10 – 24.4.10
- Cisco / Cisco IOS XR Software25.1.1 – 25.1.1
- Cisco / Cisco IOS XR Software24.4.2 – 24.4.2
- Cisco / Cisco IOS XR Software24.3.20 – 24.3.20
- Cisco / Cisco IOS XR Software24.4.15 – 24.4.15
- Cisco / Cisco IOS XR Software25.2.1 – 25.2.1
- Cisco / Cisco IOS XR Software25.1.2 – 25.1.2
- Cisco / Cisco IOS XR Software24.3.30 – 24.3.30
- Cisco / Cisco IOS XR Software24.4.30 – 24.4.30
- Cisco / Cisco IOS XR Software24.2.21 – 24.2.21
- Cisco / Cisco IOS XR Software25.2.15 – 25.2.15
- Cisco / ios_xr7.8.0 – 25.2.2
- Cisco / ios_xr25.3.0 – 25.3.0