PT-2013-5630 · Cisco · Cisco Ios Xr

Published 2013-10-23 · Updated 2013-10-25 · CVE-2013-5549

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.8.1 through 4.2.0 Cisco IOS XR Software Releases 3.3.0 to 4.2.0

Description The issue is related to the improper processing of fragmented packets within certain route-processor components, which can cause a denial of service (transmission outage) via IPv4 or IPv6 traffic. This is due to the improper handling of fragmented packets, which could result in the route processor being unable to transmit packets to the fabric.

Recommendations For versions 3.8.1 through 4.2.0, update to version 4.2.1 or later of Cisco IOS XR Software to address the vulnerability. For versions 3.3.0 to 4.2.0, install the Software Maintenance Upgrades (SMU) for Cisco bug ID CSCtz62593 to mitigate the issue.

Fix

Related Identifiers

CVE-2013-5549

Affected Products

Cisco Ios Xr

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iosxr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5549 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iosxr · Vendor Advisory