CVE-2009-5038: Cisco IOS

High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Cisco IOS before 15.0(1)XA does not properly handle IRC traffic during a specific time period after an initial reload, which allows remote attackers to cause a denial of service (device reload) via an attempted connection to a certain IRC server, related to a "corrupted magic value," aka Bug ID CSCso05336.

Affected products

• Cisco IOS: before 15.0\(1\)xa (fixed in 15.0\(1\)xa)

Published 2011-01-07. Last modified 2026-06-16.