PT-2013-5645 · Cisco · Cisco Ios Xr

Published 2013-11-07 · Updated 2013-11-14 · CVE-2013-5565

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.1

Description The issue is related to the OSPFv3 functionality, which allows remote attackers to cause a denial of service (process crash) via a malformed LSA Type-1 packet. This is due to improper parsing of malformed type 1 link-state advertisement (LSA) packets. An attacker could exploit this by sending a malformed type 1 LSA packet to a vulnerable device, potentially leading to a crash of the OSPFv3 process and a denial of service (DoS) condition. The vulnerability can be exploited by an unauthenticated, remote attacker, but it may require access to trusted, internal networks.

Recommendations For Cisco IOS XR version 5.1, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice. As a temporary workaround, consider restricting access to the OSPFv3 process to minimize the risk of exploitation. Avoid using the LSA Type-1 packet in the affected API endpoint until the issue is resolved.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-5565

Affected Products

Cisco Ios Xr

References · 4

• http://tools.cisco.com/security/center/viewAlert.x?alertId=31675 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5565 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5565 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20131107-CVE-2013-5565 · Note