PT-2013-6080

CVE-2013-6693

·

Published

2013-11-21

·

Updated

2013-11-22

Description by

CVSS 2.0
5.4
Medium
MetricsAV:N/AC:H/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.3(3)S and earlier
Description A denial of service issue exists due to chunk corruption when MLDP and a large number of VRFs are configured on a device. An attacker could exploit this by sending a large number of multicast flows over configured VRF instances, leading to a device reload and a denial of service condition. The attacker would likely need access to trusted, internal networks to successfully exploit this issue.
Recommendations For Cisco IOS versions 15.3(3)S and earlier, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾