The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1 as used in Cisco Carrier Routing System and other products allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic aka Bug ID CSCti59888.