DOS: Cisco Syslog UDP Flood Denial of Service

This signature detects malformed syslog packets sent to a Cisco router. A successful attack can force the device to lose state of incoming packets, causing a denial of service against the IOS Firewall feature.

Extended Description

A vulnerability exists in Cisco IOS that is caused by improper handling of UDP packets sent to the Syslog port. This vulnerability allows an attacker to crash the router.

Short Name
DOS:NETDEV:CISCO-SYSLOG-DOS
Severity
Minor
Recommended
False
Recommended Action
None
Category
DOS
Keywords
CVE-1999-0063 Cisco Denial Flood Service Syslog UDP of
Release Date
04/01/2004
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3324
False Positive
Unknown
CVSS Score

5.0

Found a potential security threat?