CVE-2013-2779

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 MVPN (aka MVPNv6) packets, aka Bug ID CSCub34945, a different vulnerability than CVE-2013-1164.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2013-04-11

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Asr 1001 (Cisco)
• Asr 1002 (Cisco)
• Asr 1002-x (Cisco)
• Asr 1002 Fixed Router (Cisco)
• Asr 1004 (Cisco)
• Asr 1006 (Cisco)
• Asr 1013 (Cisco)
• Asr 1023 Router (Cisco)
• Ios Xe (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000