full-disclosure - rumours of new Cisco IOS vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3F15C789.8080709@thievco.com>
From: BlueBoar at thievco.com (Blue Boar)
Subject: rumours of new Cisco IOS vulnerability

Len Rose wrote:
> According to what I've been reading it's a remotely
> exploitable denial of service situation, based on
> specially crafted packets designed to fill up the
> "process switched" input queues on an interface.

That generally means packets with a destination address of one of the 
router's own interfaces.  If there's some mystery exploit out there, one 
workaround would be to firewall the router's own IP address(es).  This 
would still allow the router to perform its routing function for other IPs.

					BB