Lucene search

CiscoCISCO-SA-20130917-CVE-2013-1121

HistorySep 17, 2013 - 6:41 p.m.

Cisco NX-OS Software BGP Regex Vulnerability

2013-09-1718:41:52

tools.cisco.com

CVSS2

5.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

EPSS

0.002

Percentile

53.2%

JSON

A vulnerability in the Border Gateway Protocol (BGP) code of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause the affected device to reload.

The vulnerability is due to an issue with the regex engine used when processing complex regular expressions. An attacker could exploit this vulnerability by injecting specific autonomous system (AS) path sets. If the affected device has a complex regular expression applied to the inbound routes, the vulnerability may be triggered. An exploit could allow the attacker to trigger Cisco NX-OS Software to restart.

Cisco has confirmed the vulnerability in a security notice and released software updates.

Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.

Affected configurations

Vulners

Node

cisconx_osMatch4.1

cisconx_osMatch5.0

cisconx_osMatch4.2

cisconx_osMatch5.1

cisconx_osMatch5.2

cisconx_osMatch6.1

cisconx_osMatch5.0\(2\)n2

cisconx_osMatch5.0\(3\)n1

cisconx_osMatch5.0\(3\)n2

cisconx_osMatch5.1\(3\)n1

cisconx_osMatch5.1\(3\)n2

cisconx_osMatch5.2\(1\)n1

cisconx_osMatch6.0

cisconx_osMatch4.1\(2\)

cisconx_osMatch4.1\(3\)

cisconx_osMatch4.1\(4\)

cisconx_osMatch4.1\(5\)

cisconx_osMatch5.0\(2a\)

cisconx_osMatch5.0\(3\)

cisconx_osMatch5.0\(5\)

cisconx_osMatch4.2\(2a\)

cisconx_osMatch4.2\(3\)

cisconx_osMatch4.2\(4\)

cisconx_osMatch4.2\(6\)

cisconx_osMatch4.2\(8\)

cisconx_osMatch5.1\(1\)

cisconx_osMatch5.1\(1a\)

cisconx_osMatch5.1\(3\)

cisconx_osMatch5.1\(4\)

cisconx_osMatch5.1\(5\)

cisconx_osMatch5.1\(6\)

cisconx_osMatch5.2\(1\)

cisconx_osMatch5.2\(3a\)

cisconx_osMatch5.2\(4\)

cisconx_osMatch5.2\(5\)

cisconx_osMatch5.2\(7\)

cisconx_osMatch5.2\(9\)

cisconx_osMatch6.1\(1\)

cisconx_osMatch6.1\(2\)

cisconx_osMatch6.1\(3\)

cisconx_osMatch5.0\(2\)n2\(1\)

cisconx_osMatch5.0\(2\)n2\(1a\)

cisconx_osMatch5.0\(3\)n1\(1c\)

cisconx_osMatch5.0\(3\)n2\(1\)

cisconx_osMatch5.0\(3\)n2\(2\)

cisconx_osMatch5.0\(3\)n2\(2a\)

cisconx_osMatch5.0\(3\)n2\(2b\)

cisconx_osMatch5.1\(3\)n1\(1\)

cisconx_osMatch5.1\(3\)n1\(1a\)

cisconx_osMatch5.1\(3\)n2\(1\)

cisconx_osMatch5.1\(3\)n2\(1a\)

cisconx_osMatch5.1\(3\)n2\(1b\)

cisconx_osMatch5.1\(3\)n2\(1c\)

cisconx_osMatch5.2\(1\)n1\(1\)

cisconx_osMatch5.2\(1\)n1\(1a\)

cisconx_osMatch5.2\(1\)n1\(1b\)

cisconx_osMatch5.2\(1\)n1\(2\)

cisconx_osMatch5.2\(1\)n1\(2a\)

cisconx_osMatch5.2\(1\)n1\(3\)

cisconx_osMatch5.2\(1\)n1\(4\)

cisconx_osMatch6.0\(1\)

cisconx_osMatch6.0\(2\)

cisconx_osMatch6.0\(3\)

cisconx_osMatch6.0\(4\)

VendorProductVersionCPE
cisconx_os4.1cpe:2.3:o:cisco:nx_os:4.1:*:*:*:*:*:*:*
cisconx_os5.0cpe:2.3:o:cisco:nx_os:5.0:*:*:*:*:*:*:*
cisconx_os4.2cpe:2.3:o:cisco:nx_os:4.2:*:*:*:*:*:*:*
cisconx_os5.1cpe:2.3:o:cisco:nx_os:5.1:*:*:*:*:*:*:*
cisconx_os5.2cpe:2.3:o:cisco:nx_os:5.2:*:*:*:*:*:*:*
cisconx_os6.1cpe:2.3:o:cisco:nx_os:6.1:*:*:*:*:*:*:*
cisconx_os5.0(2)n2cpe:2.3:o:cisco:nx_os:5.0\(2\)n2:*:*:*:*:*:*:*
cisconx_os5.0(3)n1cpe:2.3:o:cisco:nx_os:5.0\(3\)n1:*:*:*:*:*:*:*
cisconx_os5.0(3)n2cpe:2.3:o:cisco:nx_os:5.0\(3\)n2:*:*:*:*:*:*:*
cisconx_os5.1(3)n1cpe:2.3:o:cisco:nx_os:5.1\(3\)n1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	nx_os	4.1	cpe:2.3:o:cisco:nx_os:4.1:::::::*
cisco	nx_os	5.0	cpe:2.3:o:cisco:nx_os:5.0:::::::*
cisco	nx_os	4.2	cpe:2.3:o:cisco:nx_os:4.2:::::::*
cisco	nx_os	5.1	cpe:2.3:o:cisco:nx_os:5.1:::::::*
cisco	nx_os	5.2	cpe:2.3:o:cisco:nx_os:5.2:::::::*
cisco	nx_os	6.1	cpe:2.3:o:cisco:nx_os:6.1:::::::*
cisco	nx_os	5.0(2)n2	cpe:2.3:o:cisco:nx_os:5.0\(2\)n2:::::::*
cisco	nx_os	5.0(3)n1	cpe:2.3:o:cisco:nx_os:5.0\(3\)n1:::::::*
cisco	nx_os	5.0(3)n2	cpe:2.3:o:cisco:nx_os:5.0\(3\)n2:::::::*
cisco	nx_os	5.1(3)n1	cpe:2.3:o:cisco:nx_os:5.1\(3\)n1:::::::*