CVE-2010-3035 - Vulnerability Details - OpenCVE

Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is in the KEV database since March 25, 2022.

The EPSS score is 0.03675.

Exploitation active

Automatable yes

Technical Impact partial

Vendors	Products
Cisco	Ios Xr

Configuration 1 [-]

cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html
http://osvdb.org/67696
http://secunia.com/advisories/41190
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml
http://www.securitytracker.com/id?1024371
http://www.vupen.com/english/advisories/2010/2227
https://exchange.xforce.ibmcloud.com/vulnerabilities/61443

History

Fri, 15 Nov 2024 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		kev `{'dateAdded': '2022-03-25'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2010-08-30T20:00:00.000Z

Updated: 2025-07-30T01:47:04.437Z

Reserved: 2010-08-17T00:00:00.000Z

Link: CVE-2010-3035

Vulnrichment

Updated: 2024-08-07T02:55:46.474Z

NVD

Status : Deferred

Published: 2010-08-30T21:00:12.203

Modified: 2025-04-11T00:51:21.963

Link: CVE-2010-3035

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-08-27T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01.000Z", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "ciscoiosxr-bgp-packet-dos(61443)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61443"}, {"name": "1024371", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1024371"}, {"name": "20100827 Cisco IOS XR Software Border Gateway Protocol Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml"}, {"name": "[nanog] 20100827 Did your BGP crash today?", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html"}, {"name": "41190", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/41190"}, {"name": "ADV-2010-2227", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/2227"}, {"name": "67696", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/67696"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2010-3035", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ciscoiosxr-bgp-packet-dos(61443)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61443"}, {"name": "1024371", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1024371"}, {"name": "20100827 Cisco IOS XR Software Border Gateway Protocol Vulnerability", "refsource": "CISCO", "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml"}, {"name": "[nanog] 20100827 Did your BGP crash today?", "refsource": "MLIST", "url": "http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html"}, {"name": "41190", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/41190"}, {"name": "ADV-2010-2227", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/2227"}, {"name": "67696", "refsource": "OSVDB", "url": "http://osvdb.org/67696"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T02:55:46.474Z"}, "title": "CVE Program Container", "references": [{"name": "ciscoiosxr-bgp-packet-dos(61443)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61443"}, {"name": "1024371", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1024371"}, {"name": "20100827 Cisco IOS XR Software Border Gateway Protocol Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml"}, {"name": "[nanog] 20100827 Did your BGP crash today?", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html"}, {"name": "41190", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/41190"}, {"name": "ADV-2010-2227", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/2227"}, {"name": "67696", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/67696"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2010-3035", "role": "CISA Coordinator", "options": [{"Exploitation": "active"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-08T17:40:14.918410Z"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2022-03-25", "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3035"}}}], "timeline": [{"time": "2022-03-25T00:00:00+00:00", "lang": "en", "value": "CVE-2010-3035 added to CISA KEV"}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-07-30T01:47:04.437Z"}}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2010-3035", "datePublished": "2010-08-30T20:00:00.000Z", "dateReserved": "2010-08-17T00:00:00.000Z", "dateUpdated": "2025-07-30T01:47:04.437Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61443", "name": "ciscoiosxr-bgp-packet-dos(61443)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"]}, {"url": "http://www.securitytracker.com/id?1024371", "name": "1024371", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"]}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml", "name": "20100827 Cisco IOS XR Software Border Gateway Protocol Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"]}, {"url": "http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html", "name": "[nanog] 20100827 Did your BGP crash today?", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"]}, {"url": "http://secunia.com/advisories/41190", "name": "41190", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"]}, {"url": "http://www.vupen.com/english/advisories/2010/2227", "name": "ADV-2010-2227", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"]}, {"url": "http://osvdb.org/67696", "name": "67696", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T02:55:46.474Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2010-3035", "role": "CISA Coordinator", "options": [{"Exploitation": "active"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-08T17:40:14.918410Z"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2022-03-25", "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3035"}}}], "timeline": [{"lang": "en", "time": "2022-03-25T00:00:00+00:00", "value": "CVE-2010-3035 added to CISA KEV"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-08T16:07:24.860Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-08-27T00:00:00.000Z", "references": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61443", "name": "ciscoiosxr-bgp-packet-dos(61443)", "tags": ["vdb-entry", "x_refsource_XF"]}, {"url": "http://www.securitytracker.com/id?1024371", "name": "1024371", "tags": ["vdb-entry", "x_refsource_SECTRACK"]}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml", "name": "20100827 Cisco IOS XR Software Border Gateway Protocol Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"]}, {"url": "http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html", "name": "[nanog] 20100827 Did your BGP crash today?", "tags": ["mailing-list", "x_refsource_MLIST"]}, {"url": "http://secunia.com/advisories/41190", "name": "41190", "tags": ["third-party-advisory", "x_refsource_SECUNIA"]}, {"url": "http://www.vupen.com/english/advisories/2010/2227", "name": "ADV-2010-2227", "tags": ["vdb-entry", "x_refsource_VUPEN"]}, {"url": "http://osvdb.org/67696", "name": "67696", "tags": ["vdb-entry", "x_refsource_OSVDB"]}], "descriptions": [{"lang": "en", "value": "Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2017-08-16T14:57:01.000Z"}, "x_legacyV4Record": {"affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "n/a"}]}, "product_name": "n/a"}]}, "vendor_name": "n/a"}]}}, "data_type": "CVE", "references": {"reference_data": [{"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61443", "name": "ciscoiosxr-bgp-packet-dos(61443)", "refsource": "XF"}, {"url": "http://www.securitytracker.com/id?1024371", "name": "1024371", "refsource": "SECTRACK"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml", "name": "20100827 Cisco IOS XR Software Border Gateway Protocol Vulnerability", "refsource": "CISCO"}, {"url": "http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html", "name": "[nanog] 20100827 Did your BGP crash today?", "refsource": "MLIST"}, {"url": "http://secunia.com/advisories/41190", "name": "41190", "refsource": "SECUNIA"}, {"url": "http://www.vupen.com/english/advisories/2010/2227", "name": "ADV-2010-2227", "refsource": "VUPEN"}, {"url": "http://osvdb.org/67696", "name": "67696", "refsource": "OSVDB"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-3035", "STATE": "PUBLIC", "ASSIGNER": "psirt@cisco.com"}}}}, "cveMetadata": {"cveId": "CVE-2010-3035", "state": "PUBLISHED", "dateUpdated": "2025-07-30T01:47:04.437Z", "dateReserved": "2010-08-17T00:00:00.000Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2010-08-30T20:00:00.000Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{"cisaActionDue": "2022-04-15", "cisaExploitAdd": "2022-03-25", "cisaRequiredAction": "Apply updates per vendor instructions.", "cisaVulnerabilityName": "Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability", "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*", "matchCriteriaId": "14636B6F-0D6A-4B1F-9F7E-C5A7445A5CFC", "versionEndIncluding": "3.9.1", "versionStartIncluding": "3.4.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211."}, {"lang": "es", "value": "Cisco IOS XR v3.4.0 hasta la versi\u00f3n v3.9.1, si BGP est\u00e1 activado, no maneja apropiadamente los atributos transitivos no reconocidos, lo que permite a atacantes remotos provocar una denegaci\u00f3n de servicio (\"peering reset\" o reinicio del hom\u00f3logo) a trav\u00e9s de un mensaje de anuncio de prefijos modificado, como se ha demostrado en la realidad en agosto del 2010 con el c\u00f3digo de tipo de atributo 99. Tambi\u00e9n conocido como Bug ID CSCti62211."}], "id": "CVE-2010-3035", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2010-08-30T21:00:12.203", "references": [{"source": "psirt@cisco.com", "tags": ["Mailing List"], "url": "http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html"}, {"source": "psirt@cisco.com", "tags": ["Broken Link"], "url": "http://osvdb.org/67696"}, {"source": "psirt@cisco.com", "tags": ["Broken Link"], "url": "http://secunia.com/advisories/41190"}, {"source": "psirt@cisco.com", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml"}, {"source": "psirt@cisco.com", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1024371"}, {"source": "psirt@cisco.com", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2010/2227"}, {"source": "psirt@cisco.com", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61443"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://osvdb.org/67696"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://secunia.com/advisories/41190"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b4411f.shtml"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id?1024371"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.vupen.com/english/advisories/2010/2227"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["VDB Entry", "Vendor Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/61443"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}