PT-2013-5630 · Cisco · Cisco Ios Xr

Publicado 2013-10-23 · Atualizado 2013-10-25 · CVE-2013-5549

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.8.1 through 4.2.0 Cisco IOS XR Software Releases 3.3.0 to 4.2.0

Description The issue is related to the improper processing of fragmented packets within certain route-processor components, which can cause a denial of service (transmission outage) via IPv4 or IPv6 traffic. This is due to the improper handling of fragmented packets, which could result in the route processor being unable to transmit packets to the fabric.

Recommendations For versions 3.8.1 through 4.2.0, update to version 4.2.1 or later of Cisco IOS XR Software to address the vulnerability. For versions 3.3.0 to 4.2.0, install the Software Maintenance Upgrades (SMU) for Cisco bug ID CSCtz62593 to mitigate the issue.

Correção

Identificadores relacionados

CVE-2013-5549

Produtos afetados

Cisco Ios Xr

Referências · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iosxr · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-5549 · Nota de Segurança
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iosxr · Aviso do Fabricante