CVEvulnerability

CVE-2009-2872

6.8 MEDIUM Published 2009-09-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-09-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:C

Description

Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via a malformed packet that is not properly handled during switching from one tunnel to a second tunnel, aka Bug IDs CSCsh97579 and CSCsq31776.

Affected configurations

• cisco ios 12.0 • cisco ios 12.0da • cisco ios 12.0db • cisco ios 12.0dc • cisco ios 12.0s • cisco ios 12.0sc • cisco ios 12.0sl • cisco ios 12.0sp • cisco ios 12.0st • cisco ios 12.0sx • cisco ios 12.0sy • cisco ios 12.0sz • cisco ios 12.0t • cisco ios 12.0w • cisco ios 12.0wc • cisco ios 12.0xa • cisco ios 12.0xb • cisco ios 12.0xc • cisco ios 12.0xd • cisco ios 12.0xe • cisco ios 12.0xg • cisco ios 12.0xh • cisco ios 12.0xi • cisco ios 12.0xj • cisco ios 12.0xk • cisco ios 12.0xl • cisco ios 12.0xm • cisco ios 12.0xn • cisco ios 12.0xq • cisco ios 12.0xr • cisco ios 12.0xt • cisco ios 12.0xv • cisco ios 12.1 • cisco ios 12.1aa • cisco ios 12.1ax • cisco ios 12.1ay • cisco ios 12.1cx • cisco ios 12.1da • cisco ios 12.1db • cisco ios 12.1dc • cisco ios 12.1e • cisco ios 12.1ea • cisco ios 12.1eb • cisco ios 12.1ec • cisco ios 12.1eo • cisco ios 12.1eu • cisco ios 12.1ew • cisco ios 12.1ex • cisco ios 12.1ey • cisco ios 12.1ez • cisco ios 12.1ga • cisco ios 12.1gb • cisco ios 12.1t • cisco ios 12.1xa • cisco ios 12.1xb • cisco ios 12.1xc • cisco ios 12.1xd • cisco ios 12.1xe • cisco ios 12.1xf • cisco ios 12.1xg … and 228 more

References