PT-2013-6080
CVE-2013-6693
·
تاريخ النشر
2013-11-21
·
تاريخ التحديث
2013-11-22
الوصف من
CVSS 2.0
5.4
متوسطةالمقاييسAV:N/AC:H/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Cisco IOS versions 15.3(3)S and earlier
Description
A denial of service issue exists due to chunk corruption when MLDP and a large number of VRFs are configured on a device. An attacker could exploit this by sending a large number of multicast flows over configured VRF instances, leading to a device reload and a denial of service condition. The attacker would likely need access to trusted, internal networks to successfully exploit this issue.
Recommendations
For Cisco IOS versions 15.3(3)S and earlier, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾