CVE-2010-0576

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-03-25 · updated 2026-06-16

Description

Unspecified vulnerability in Cisco IOS 12.0 through 12.4, IOS XE 2.1.x through 2.3.x before 2.3.2, and IOS XR 3.2.x through 3.4.3, when Multiprotocol Label Switching (MPLS) and Label Distribution Protocol (LDP) are enabled, allows remote attackers to cause a denial of service (device reload or process restart) via a crafted LDP packet, aka Bug IDs CSCsz45567 and CSCsj25893.

Affected products

Cisco IOS: 12.0s, 12.0sl, 12.0sx, 12.0sy, 12.0sz, 12.1ax (+162)
Cisco IOS XE: 2.1, 2.2, 2.3
Cisco IOS XR Software: 3.2, 3.2.1, 3.2.2, 3.2.4, 3.2.50, 3.3.0 (+9)

References

http://osvdb.org/63188
http://secunia.com/advisories/39065
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20ee2.shtml
http://www.securityfocus.com/bid/38938
http://www.securitytracker.com/id?1023740
http://www.vupen.com/english/advisories/2010/0707
https://exchange.xforce.ibmcloud.com/vulnerabilities/57143
http://osvdb.org/63188
http://secunia.com/advisories/39065
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b20ee2.shtml
http://www.securityfocus.com/bid/38938
http://www.securitytracker.com/id?1023740

Get alerted when CVE-2010-0576 or the next vulnerability affects your stack