Lucene search

[email protected]NVD:CVE-2013-2779

HistoryApr 11, 2013 - 10:55 a.m.

CVE-2013-2779

2013-04-1110:55:02

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

49.5%

JSON

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 MVPN (aka MVPNv6) packets, aka Bug ID CSCub34945, a different vulnerability than CVE-2013-1164.

Affected configurations

Nvd

Node

ciscoios_xeMatch3.4.0as

ciscoios_xeMatch3.4.0s

ciscoios_xeMatch3.4.1s

ciscoios_xeMatch3.4.2s

ciscoios_xeMatch3.4.3s

ciscoios_xeMatch3.4.4s

ciscoios_xeMatch3.4.xs

ciscoios_xeMatch3.5.0s

ciscoios_xeMatch3.5.1s

ciscoios_xeMatch3.5.2s

ciscoios_xeMatch3.5.xs

ciscoios_xeMatch3.6.0s

ciscoios_xeMatch3.6.1s

ciscoios_xeMatch3.6.2s

ciscoios_xeMatch3.7.0s

AND

ciscoasr_1001Match-

ciscoasr_1002Match-

ciscoasr_1002-xMatch-

ciscoasr_1002_fixed_routerMatch-

ciscoasr_1004Match-

ciscoasr_1006Match-

ciscoasr_1013Match-

ciscoasr_1023_routerMatch-

VendorProductVersionCPE
ciscoios_xe3.4.0ascpe:2.3:o:cisco:ios_xe:3.4.0as:*:*:*:*:*:*:*
ciscoios_xe3.4.0scpe:2.3:o:cisco:ios_xe:3.4.0s:*:*:*:*:*:*:*
ciscoios_xe3.4.1scpe:2.3:o:cisco:ios_xe:3.4.1s:*:*:*:*:*:*:*
ciscoios_xe3.4.2scpe:2.3:o:cisco:ios_xe:3.4.2s:*:*:*:*:*:*:*
ciscoios_xe3.4.3scpe:2.3:o:cisco:ios_xe:3.4.3s:*:*:*:*:*:*:*
ciscoios_xe3.4.4scpe:2.3:o:cisco:ios_xe:3.4.4s:*:*:*:*:*:*:*
ciscoios_xe3.4.xscpe:2.3:o:cisco:ios_xe:3.4.xs:*:*:*:*:*:*:*
ciscoios_xe3.5.0scpe:2.3:o:cisco:ios_xe:3.5.0s:*:*:*:*:*:*:*
ciscoios_xe3.5.1scpe:2.3:o:cisco:ios_xe:3.5.1s:*:*:*:*:*:*:*
ciscoios_xe3.5.2scpe:2.3:o:cisco:ios_xe:3.5.2s:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	3.4.0as	cpe:2.3:o:cisco:ios_xe:3.4.0as:::::::*
cisco	ios_xe	3.4.0s	cpe:2.3:o:cisco:ios_xe:3.4.0s:::::::*
cisco	ios_xe	3.4.1s	cpe:2.3:o:cisco:ios_xe:3.4.1s:::::::*
cisco	ios_xe	3.4.2s	cpe:2.3:o:cisco:ios_xe:3.4.2s:::::::*
cisco	ios_xe	3.4.3s	cpe:2.3:o:cisco:ios_xe:3.4.3s:::::::*
cisco	ios_xe	3.4.4s	cpe:2.3:o:cisco:ios_xe:3.4.4s:::::::*
cisco	ios_xe	3.4.xs	cpe:2.3:o:cisco:ios_xe:3.4.xs:::::::*
cisco	ios_xe	3.5.0s	cpe:2.3:o:cisco:ios_xe:3.5.0s:::::::*
cisco	ios_xe	3.5.1s	cpe:2.3:o:cisco:ios_xe:3.5.1s:::::::*
cisco	ios_xe	3.5.2s	cpe:2.3:o:cisco:ios_xe:3.5.2s:::::::*