CVE-2008-3804
published 2008-09-26CVE-2008-3804: Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12.2 and 12.4 allows remote attackers to…
PriorityP425high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
3.53%
87.9th percentile
Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (memory corruption) via crafted packets for which the software path is used.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios_mpls_forwarding_infrastructure | — | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w59m-3g47-qx6c: Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12
ghsa_unreviewed·2022-05-02
CVE-2008-3804 [HIGH] GHSA-w59m-3g47-qx6c: Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12
Unspecified vulnerability in the Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (memory corruption) via crafted packets for which the software path is used.
Cisco
Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability
vendor_cisco·2008-09-24·CVSS 7.8
CVE-2008-3804 [HIGH] CWE-399 Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability
Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability
Cisco IOS Software Multi Protocol Label Switching (MPLS) Forwarding
Infrastructure (MFI) is vulnerable to a Denial of Service (DoS) attack from
specially crafted packets. Only the MFI is affected by this vulnerability.
Older Label Forwarding Information Base (LFIB) implementation, which is
replaced by MFI, is not affected.
Cisco has released software updates that address this vulnerability.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080924-mfi.
Note: The September 24, 2008 IOS Advisory bundled publication includes
twelve Security Advisories. Eleven of the advisories address vulnerabilities in
Cisco's IOS software, and one advisory addresse
Cisco
Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability
vendor_cisco
CVE-2008-3804 Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability
CVE-2008-3804: Cisco IOS MPLS Forwarding Infrastructure Denial of Service Vulnerability
Cisco IOS Software Multi Protocol Label Switching (MPLS) Forwarding Infrastructure (MFI) is vulnerable to a Denial of Service (DoS) attack from specially crafted packets. Only the MFI is affected by this vulnerability. Older Label Forwarding Information Base (LFIB) implementation, which is replaced by MFI, is not affected. Cisco has released software updates that address this vulnerability. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20080924-mfi . Note: The September 24, 2008 IOS Advisory bundled publication includes twelve Security Advisories. Eleven of the advisories address vulnerabilities in Cisco's IOS software, and one advisory
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/31990http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ac.shtmlhttp://www.securitytracker.com/id?1020934http://www.vupen.com/english/advisories/2008/2670https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5619http://secunia.com/advisories/31990http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ac.shtmlhttp://www.securitytracker.com/id?1020934http://www.vupen.com/english/advisories/2008/2670https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5619
2008-09-26
Published