CVE-2013-1164

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 multicast packets, aka Bug ID CSCtz97563.

Score

CVSS 2.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2013-04-11

Last modified

2024-09-16

Affected products

• Asr 1001 (Cisco)
• Asr 1002 (Cisco)
• Asr 1002-x (Cisco)
• Asr 1004 (Cisco)
• Asr 1006 (Cisco)
• Asr 1013 (Cisco)
• Ios Xe (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000