PT-2013-6080
CVE-2013-6693
·
Published
2013-11-21
·
Updated
2013-11-22
Description by
CVSS 2.0
5.4
MediumMetricsAV:N/AC:H/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Cisco IOS versions 15.3(3)S and earlier
Description
A denial of service issue exists due to chunk corruption when MLDP and a large number of VRFs are configured on a device. An attacker could exploit this by sending a large number of multicast flows over configured VRF instances, leading to a device reload and a denial of service condition. The attacker would likely need access to trusted, internal networks to successfully exploit this issue.
Recommendations
For Cisco IOS versions 15.3(3)S and earlier, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice.
Found an issue in the description? Have something to add? Feel free to write us 👾