Lucene search

MitreCVE-2013-2779

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2013-2779

2022-10-0316:15:01

CWE-20

mitre

web.nvd.nist.gov

cisco

cve-2013-2779

ios xe

aggregation services routers

denial of service

vulnerability

security

bug id

ipv6

mvpn

cscub34945

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

49.5%

JSON

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 MVPN (aka MVPNv6) packets, aka Bug ID CSCub34945, a different vulnerability than CVE-2013-1164.

Affected configurations

Nvd

Node

ciscoios_xeMatch3.4.0as

ciscoios_xeMatch3.4.0s

ciscoios_xeMatch3.4.1s

ciscoios_xeMatch3.4.2s

ciscoios_xeMatch3.4.3s

ciscoios_xeMatch3.4.4s

ciscoios_xeMatch3.4.xs

ciscoios_xeMatch3.5.0s

ciscoios_xeMatch3.5.1s

ciscoios_xeMatch3.5.2s

ciscoios_xeMatch3.5.xs

ciscoios_xeMatch3.6.0s

ciscoios_xeMatch3.6.1s

ciscoios_xeMatch3.6.2s

ciscoios_xeMatch3.7.0s

AND

ciscoasr_1001Match-

ciscoasr_1002Match-

ciscoasr_1002-xMatch-

ciscoasr_1002_fixed_routerMatch-

ciscoasr_1004Match-

ciscoasr_1006Match-

ciscoasr_1013Match-

ciscoasr_1023_routerMatch-

VendorProductVersionCPE
ciscoios_xe3.6.2scpe:/o:cisco:ios_xe:3.6.2s:::
ciscoasr_1006-cpe:/h:cisco:asr_1006:-:::
ciscoasr_1001-cpe:/h:cisco:asr_1001:-:::
ciscoios_xe3.4.4scpe:/o:cisco:ios_xe:3.4.4s:::
ciscoios_xe3.4.1scpe:/o:cisco:ios_xe:3.4.1s:::
ciscoasr_1004-cpe:/h:cisco:asr_1004:-:::
ciscoios_xe3.5.0scpe:/o:cisco:ios_xe:3.5.0s:::
ciscoios_xe3.5.1scpe:/o:cisco:ios_xe:3.5.1s:::
ciscoios_xe3.5.xscpe:/o:cisco:ios_xe:3.5.xs:::
ciscoios_xe3.4.0scpe:/o:cisco:ios_xe:3.4.0s:::

Vendor	Product	Version	CPE
cisco	ios_xe	3.6.2s	cpe:/o:cisco:ios_xe:3.6.2s:::
cisco	asr_1006	-	cpe:/h:cisco:asr_1006:-:::
cisco	asr_1001	-	cpe:/h:cisco:asr_1001:-:::
cisco	ios_xe	3.4.4s	cpe:/o:cisco:ios_xe:3.4.4s:::
cisco	ios_xe	3.4.1s	cpe:/o:cisco:ios_xe:3.4.1s:::
cisco	asr_1004	-	cpe:/h:cisco:asr_1004:-:::
cisco	ios_xe	3.5.0s	cpe:/o:cisco:ios_xe:3.5.0s:::
cisco	ios_xe	3.5.1s	cpe:/o:cisco:ios_xe:3.5.1s:::
cisco	ios_xe	3.5.xs	cpe:/o:cisco:ios_xe:3.5.xs:::
cisco	ios_xe	3.4.0s	cpe:/o:cisco:ios_xe:3.4.0s:::