CVE-2013-6981

Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packets, aka Bug ID CSCul00709.

CVSS v2.0 5.4 MEDIUM

5.4^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:H/Au:N/C:N/I:N/A:C

Exploitability : 4.9 / Impact : 6.9

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/101423
http://secunia.com/advisories/56206
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6981	Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32281	Vendor Advisory
http://www.securityfocus.com/bid/64514	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1029538	Third Party Advisory VDB Entry
http://osvdb.org/101423
http://secunia.com/advisories/56206
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6981	Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32281	Vendor Advisory
http://www.securityfocus.com/bid/64514	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1029538	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:cisco:ios_xe::::::::
	cpe:2.3:o:cisco:ios_xe:2.5\(.0\):::::::*
	cpe:2.3:o:cisco:ios_xe:2.6\(.0\):::::::*
	cpe:2.3:o:cisco:ios_xe:2.6\(.1\):::::::*
	cpe:2.3:o:cisco:ios_xe:2.6\(.2\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.1s\(.0\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.1s\(.1\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.1s\(.2\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.1s\(.3\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.2s\(.0\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.2s\(.1\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.2s\(.2\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.3s\(.0\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.3s\(.1\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.3s\(.2\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.4s\(.0\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.4s\(.1\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.4s\(.2\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.4s\(.3\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.4s\(.4\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.4s\(.5\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.4s\(.6\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.5s\(.0\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.5s\(.1\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.5s\(.2\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.6s\(.0\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.6s\(.1\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.6s\(.2\):::::::*
	cpe:2.3:o:cisco:ios_xe:3.7s\(.0\):::::::*

History

21 Nov 2024, 02:00

Type	Values Removed	Values Added
References	~~() http://osvdb.org/101423 -~~	() http://osvdb.org/101423 -
References	~~() http://secunia.com/advisories/56206 -~~	() http://secunia.com/advisories/56206 -
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6981 - Vendor Advisory~~	() http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6981 - Vendor Advisory
References	~~() http://tools.cisco.com/security/center/viewAlert.x?alertId=32281 - Vendor Advisory~~	() http://tools.cisco.com/security/center/viewAlert.x?alertId=32281 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/64514 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/64514 - Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id/1029538 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1029538 - Third Party Advisory, VDB Entry

Information

Published : 2013-12-28 04:53

Updated : 2024-11-21 02:00

NVD link : CVE-2013-6981

Mitre link : CVE-2013-6981

CVE.ORG link : CVE-2013-6981

JSON object : View

Products Affected

cisco

ios_xe

CWE

CWE-20

Improper Input Validation

5.4 /10