Code injection

2010-01-2122:30:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

88.9%

JSON

Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574.

CPENameOperatorVersion
ios_xreq3.6.1
ios_xreq3.5.2
ios_xreq3.4.2
ios_xreq3.4.1
ios_xreq3.7.0
ios_xreq3.4.3
ios_xreq3.6.0
ios_xreq3.5.3
ios_xreq3.5.4

Name	Operator	Version
ios_xr	eq	3.6.1
ios_xr	eq	3.5.2
ios_xr	eq	3.4.2
ios_xr	eq	3.4.1
ios_xr	eq	3.7.0
ios_xr	eq	3.4.3
ios_xr	eq	3.6.0
ios_xr	eq	3.5.3
ios_xr	eq	3.5.4

References

secunia.com/advisories/38227

securitytracker.com/id?1023480

www.cisco.com/en/US/products/products_security_advisory09186a0080b13512.shtml

www.securityfocus.com/bid/37878

www.vupen.com/english/advisories/2010/0183

exchange.xforce.ibmcloud.com/vulnerabilities/55767