CVE-2010-3035
- State
- Published
- Severity
- 7.5 High
- Published
- Aug 30, 2010
- Updated
- Jan 12, 2026
- Reserved
- Aug 17, 2010
Description
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ciscoiosxr-bgp-packet-dos(61443)vdb-entry
- 1024371vdb-entry
- 20100827 Cisco IOS XR Software Border Gateway Protocol Vulnerabilityvendor-advisory
- [nanog] 20100827 Did your BGP crash today?mailing-list
- 41190third-party-advisory
- ADV-2010-2227vdb-entry
- 67696vdb-entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3035government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.