CVE-2009-0631
published 2009-03-27CVE-2009-0631: Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation…
PriorityP335high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
1.92%
77.7th percentile
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, or (4) Media Gateway Control Protocol (MGCP) allows remote attackers to cause a denial of service (blocked input queue on the inbound interface) via a crafted UDP packet.
Affected
311 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4j7f-pc38-35rv: Unspecified vulnerability in Cisco IOS 12
ghsa_unreviewed·2022-05-02
CVE-2009-0631 [HIGH] GHSA-4j7f-pc38-35rv: Unspecified vulnerability in Cisco IOS 12
Unspecified vulnerability in Cisco IOS 12.0 through 12.4, when configured with (1) IP Service Level Agreements (SLAs) Responder, (2) Session Initiation Protocol (SIP), (3) H.323 Annex E Call Signaling Transport, or (4) Media Gateway Control Protocol (MGCP) allows remote attackers to cause a denial of service (blocked input queue on the inbound interface) via a crafted UDP packet.
Cisco
Cisco IOS Software Multiple Features Crafted UDP Packet Vulnerability
vendor_cisco·2009-03-25·CVSS 7.8
CVE-2009-0631 [HIGH] CWE-399 Cisco IOS Software Multiple Features Crafted UDP Packet Vulnerability
Cisco IOS Software Multiple Features Crafted UDP Packet Vulnerability
Several features within Cisco IOS Software are affected by a crafted
UDP packet vulnerability. If any of the affected features are enabled, a
successful attack will result in a blocked input queue on the inbound
interface. Only crafted UDP packets destined for the device could result in the
interface being blocked, transit traffic will not block the interface.
Cisco has released software updates that address this vulnerability.
Workarounds that mitigate this vulnerability are available.
This advisory is posted at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090325-udp.
Note: The March 25, 2009, Cisco IOS Security Advisory bundled publication
includes eigh
Cisco
Cisco IOS Software Multiple Features Crafted UDP Packet Vulnerability
vendor_cisco
CVE-2009-0631 Cisco IOS Software Multiple Features Crafted UDP Packet Vulnerability
CVE-2009-0631: Cisco IOS Software Multiple Features Crafted UDP Packet Vulnerability
Several features within Cisco IOS Software are affected by a crafted UDP packet vulnerability. If any of the affected features are enabled, a successful attack will result in a blocked input queue on the inbound interface. Only crafted UDP packets destined for the device could result in the interface being blocked, transit traffic will not block the interface. Cisco has released software updates that address this vulnerability.
CWE: CWE-399, CWE-399
Bug IDs: CSCsk64158, CSCsb25337, CSCsk64158, CSCsi34903
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90426.shtmlhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtmlhttp://www.securityfocus.com/bid/34245http://www.securitytracker.com/id?1021904https://exchange.xforce.ibmcloud.com/vulnerabilities/49419https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6720http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90426.shtmlhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtmlhttp://www.securityfocus.com/bid/34245http://www.securitytracker.com/id?1021904https://exchange.xforce.ibmcloud.com/vulnerabilities/49419https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6720
2009-03-27
Published