Lucene search
CiscoCVE-2013-5549HistoryOct 25, 2013 - 3:52 a.m.
CVE-2013-5549
2013-10-2503:52:55
cisco
web.nvd.nist.gov
30
cisco
ios xr
denial of service
vulnerability
fragmented packets
bug id cscuh30380
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
6.8
Confidence
High
EPSS
0.002
Percentile
53.2%
Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service (transmission outage) via (1) IPv4 or (2) IPv6 traffic, aka Bug ID CSCuh30380.
Affected configurations
Node
ciscoios_xrMatch3.8.1
ORciscoios_xrMatch3.8.2
ORciscoios_xrMatch3.8.3
ORciscoios_xrMatch3.8.4
ORciscoios_xrMatch3.9.0
ORciscoios_xrMatch3.9.1
ORciscoios_xrMatch3.9.2
ORciscoios_xrMatch4.0.0
ORciscoios_xrMatch4.0.1
ORciscoios_xrMatch4.0.2
ORciscoios_xrMatch4.0.3
ORciscoios_xrMatch4.0.4
ORciscoios_xrMatch4.1
ORciscoios_xrMatch4.1.1
ORciscoios_xrMatch4.1.2
ORciscoios_xrMatch4.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios_xr | 3.8.1 | cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:* |
| cisco | ios_xr | 3.8.2 | cpe:2.3:o:cisco:ios_xr:3.8.2:*:*:*:*:*:*:* |
| cisco | ios_xr | 3.8.3 | cpe:2.3:o:cisco:ios_xr:3.8.3:*:*:*:*:*:*:* |
| cisco | ios_xr | 3.8.4 | cpe:2.3:o:cisco:ios_xr:3.8.4:*:*:*:*:*:*:* |
| cisco | ios_xr | 3.9.0 | cpe:2.3:o:cisco:ios_xr:3.9.0:*:*:*:*:*:*:* |
| cisco | ios_xr | 3.9.1 | cpe:2.3:o:cisco:ios_xr:3.9.1:*:*:*:*:*:*:* |
| cisco | ios_xr | 3.9.2 | cpe:2.3:o:cisco:ios_xr:3.9.2:*:*:*:*:*:*:* |
| cisco | ios_xr | 4.0.0 | cpe:2.3:o:cisco:ios_xr:4.0.0:*:*:*:*:*:*:* |
| cisco | ios_xr | 4.0.1 | cpe:2.3:o:cisco:ios_xr:4.0.1:*:*:*:*:*:*:* |
| cisco | ios_xr | 4.0.2 | cpe:2.3:o:cisco:ios_xr:4.0.2:*:*:*:*:*:*:* |
Related
openvas
openvas
prion
prion
Code injection
2013-10-25 03:52:00
cisco
cisco
Cisco IOS XR Software Route Processor Denial of Service Vulnerability
2013-10-23 16:00:00
nessus
nessus
cvelist
cvelist
CVE-2013-5549
2013-10-25 01:00:00
nvd
nvd
CVE-2013-5549
2013-10-25 03:52:55
securityvulns
securityvulns
Cisco IOS multiple security vulnerabilities
2013-11-18 00:00:00
CVSS2
7.1
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
AI Score
6.8
Confidence
High
EPSS
0.002
Percentile
53.2%
Related for CVE-2013-5549