Cisco Cisco IOS Software Release 12.4(23)

CSCec12299

Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol 
Label Switching (MPLS) Virtual Private Networks (VPNs) or VPN Routing and Forwarding Lite 
(VRF Lite) and using Border Gateway Protocol (BGP) between Customer Edge (CE) and Provider 
Edge (PE) devices may permit information to propagate between VPNs.

Workarounds are available to help mitigate this vulnerability. 

This issue is triggered by a logic error when processing extended communities on the PE device. 

This issue cannot be deterministically exploited by an attacker. 

Cisco has released free software updates that address these vulnerabilities. Workarounds that 
mitigate these vulnerabilities are available.

This advisory is posted at 

CSCed84633

Symptoms: The interface-type and interface-number arguments in the distribute-list address family 
configuration command do not function.

Conditions: This symptom is observed on a Cisco platform that integrates the fix for caveat 
CSCea59206. A list of the affected releases can be found at 

. Cisco IOS 

software releases that are not listed in the “First Fixed-in Version” field at this location are not 
affected.

Workaround: There is no workaround.

Further Problem Description: The fix for CSCed84633 re-enables the interface-type and 
interface-number arguments in the distribute-list address family configuration command for both 
VRF interfaces and non-VRF interfaces. 

CSCek32244

Symptoms: Not all classful networks are locally generated in the BGP table.

Conditions: This symptom is observed on a Cisco router that has the auto-summary command 
enabled and occurs when classful networks are provided before the routes are made available in the 
routing table.

Workaround: There is no workaround. 

CSCek47667

Symptoms: A router may not clear BGP routes when you enter the clear bgp ipv6 unicast * 
command.

Conditions: This symptom is observed on a Cisco router that runs Cisco IOS Release 12.2SXF but 
is not release-specific.

Workaround: There is no workaround. 

CSCsc49231

Symptoms: The following traceback may appear when NHRP is configured:

Nov  5 00:50:41 UTC: %SYS-3-MGDTIMER: Running timer, init, timer = 46D8D2AC.

-Process= "NHRP", ipl= 0, pid= 226

-Traceback= 0x41250D34 0x42329F94 0x4232A0D8 0x4232A2E8 0x426A6434 0x426A9424 

0x41CB67D8 0x41CB7A5C 0x41CB8C8C 0x41CB8DF4 0x41CBA394

Condition: This symptom has been observe when NHRP is configured.