Sign-up

ID

VAR-201301-0350


CVE

CVE-2013-1112


TITLE

Cisco Carrier Routing System Service disruption in ( Packet loss ) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2013-001343

DESCRIPTION

Cisco Carrier Routing System (CRS) allows remote attackers to cause a denial of service (packet loss) via short malformed packets that trigger inefficient processing, aka Bug ID CSCud79136. An attacker can exploit this issue to cause a partial drop of legitimate traffic passing through the device, resulting in a denial-of-service condition for legitimate users. This issue is being tracked by Cisco Bug ID CSCud79136. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: Cisco IOS XR Unspecified Denial of Service Vulnerability SECUNIA ADVISORY ID: SA51989 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/51989/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=51989 RELEASE DATE: 2013-01-29 DISCUSS ADVISORY: http://secunia.com/advisories/51989/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/51989/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=51989 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: A vulnerability has been reported in Cisco IOS XR, which can be exploited by malicious people to cause a DoS (Denial of Service). SOLUTION: Apply updates. Please see the vendor's advisory for more information. PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: Cisco: http://tools.cisco.com/security/center/viewAlert.x?alertId=27991 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1112 OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.61

sources: NVD: CVE-2013-1112 // JVNDB: JVNDB-2013-001343 // CNVD: CNVD-2013-00615 // BID: 57604 // VULHUB: VHN-61114 // PACKETSTORM: 119881

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2013-00615

AFFECTED PRODUCTS

vendor:ciscomodel:carrier routing systemscope:eqversion:3.6.1

Trust: 1.6

vendor:ciscomodel:carrier routing systemscope:eqversion:4.0.0

Trust: 1.6

vendor:ciscomodel:carrier routing systemscope:eqversion:3.3.4

Trust: 1.6

vendor:ciscomodel:carrier routing systemscope:eqversion:3.6.3

Trust: 1.6

vendor:ciscomodel:carrier routing systemscope:eqversion:3.3.3

Trust: 1.6

vendor:ciscomodel:carrier routing systemscope:eqversion:4.0.3

Trust: 1.6

vendor:ciscomodel:carrier routing systemscope:eqversion:3.6.0

Trust: 1.6

vendor:ciscomodel:carrier routing systemscope:eqversion:3.3.1

Trust: 1.6

vendor:ciscomodel:carrier routing systemscope:eqversion:3.4.1

Trust: 1.6

vendor:ciscomodel:carrier routing systemscope:eqversion:4.0.1

Trust: 1.6

vendor:ciscomodel:carrier routing systemscope:eqversion:3.9.2

Trust: 1.3

vendor:ciscomodel:carrier routing systemscope:eqversion:3.9.1

Trust: 1.3

vendor:ciscomodel:carrier routing systemscope:eqversion:3.2.6

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.8.4

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.6.2

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.3.5

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.5.2

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.2.4

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.2.3

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.8.0

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.4.0

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.4.3

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.7.0

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.3.2

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:4.1.0

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:4.1.2

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:4.0.4

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:4.1.1

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.8.2

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.5.3

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.7.1

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.8.1

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.4.2

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.9.0

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.8.3

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.9.3

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.5.4

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.3.0

Trust: 1.0

vendor:ciscomodel:carrier routing systemscope:eqversion:3.2.3 to 4.1.2

Trust: 0.8

vendor:ciscomodel:carrier routing system basescope:eqversion:4.1

Trust: 0.6

vendor:ciscomodel:carrier routing systemscope:eqversion:4.2

Trust: 0.3

vendor:ciscomodel:carrier routing systemscope:eqversion:4.1

Trust: 0.3

vendor:ciscomodel:carrier routing systemscope:eqversion:4.0

Trust: 0.3

vendor:ciscomodel:carrier routing systemscope:eqversion:3.9

Trust: 0.3

vendor:ciscomodel:carrier routing systemscope:neversion:4.3(1.16)

Trust: 0.3

sources: CNVD: CNVD-2013-00615 // BID: 57604 // JVNDB: JVNDB-2013-001343 // CNNVD: CNNVD-201301-564 // NVD: CVE-2013-1112

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-1112
value: MEDIUM

Trust: 1.0

NVD: CVE-2013-1112
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201301-564
value: MEDIUM

Trust: 0.6

VULHUB: VHN-61114
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2013-1112
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-61114
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-61114 // JVNDB: JVNDB-2013-001343 // CNNVD: CNNVD-201301-564 // NVD: CVE-2013-1112

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-61114 // JVNDB: JVNDB-2013-001343 // NVD: CVE-2013-1112

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201301-564

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201301-564

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-001343

PATCH
title:Cisco Carrier Routing System Small Packets Denial of Service Vulnerabilityurl:http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1112
Trust: 0.8
title:Cisco Carrier Routing System has a patch for an unrecognized denial of service vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/31132
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2013-00615 // 
            
            
            
            JVNDB: JVNDB-2013-001343

EXTERNAL IDS
db:NVDid:CVE-2013-1112
Trust: 3.5
db:SECUNIAid:51989
Trust: 1.4
db:BIDid:57604
Trust: 1.4
db:OSVDBid:89643
Trust: 1.1
db:JVNDBid:JVNDB-2013-001343
Trust: 0.8
db:CNNVDid:CNNVD-201301-564
Trust: 0.7
db:CNVDid:CNVD-2013-00615
Trust: 0.6
db:CISCOid:20130125 CISCO CARRIER ROUTING SYSTEM SMALL PACKETS DENIAL OF SERVICE VULNERABILITY
Trust: 0.6
db:VULHUBid:VHN-61114
Trust: 0.1
db:PACKETSTORMid:119881
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2013-00615 // 
            
            
            
            VULHUB: VHN-61114 // 
            
            
            
            BID: 57604 // 
            
            
            
            JVNDB: JVNDB-2013-001343 // 
            
            
            
            PACKETSTORM: 119881 // 
            
            
            
            CNNVD: CNNVD-201301-564 // 
            
            
            
            NVD: CVE-2013-1112

REFERENCES
url:http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2013-1112
Trust: 2.1
url:http://www.securityfocus.com/bid/57604
Trust: 1.1
url:http://osvdb.org/89643
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-1112
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-1112
Trust: 0.8
url:http://secunia.com/advisories/51989/http
Trust: 0.6
url:http://secunia.com/advisories/51989
Trust: 0.6
url:http://tools.cisco.com/security/center/viewalert.x?alertid=27991
Trust: 0.4
url:http://www.cisco.com/en/us/products/ps5763/index.html
Trust: 0.3
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=51989
Trust: 0.1
url:http://secunia.com/vulnerability_intelligence/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/advisories/51989/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/advisories/51989/#comments
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/blog/325/
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2013-00615 // 
            
            
            
            VULHUB: VHN-61114 // 
            
            
            
            BID: 57604 // 
            
            
            
            JVNDB: JVNDB-2013-001343 // 
            
            
            
            PACKETSTORM: 119881 // 
            
            
            
            CNNVD: CNNVD-201301-564 // 
            
            
            
            NVD: CVE-2013-1112

CREDITS
Cisco
Trust: 0.3
sources:
            
            
            BID: 57604

SOURCES
db:CNVDid:CNVD-2013-00615
db:VULHUBid:VHN-61114
db:BIDid:57604
db:JVNDBid:JVNDB-2013-001343
db:PACKETSTORMid:119881
db:CNNVDid:CNNVD-201301-564
db:NVDid:CVE-2013-1112

LAST UPDATE DATE
2024-11-23T22:39:06.638000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2013-00615date:2013-01-31T00:00:00
db:VULHUBid:VHN-61114date:2013-02-02T00:00:00
db:BIDid:57604date:2013-01-28T00:00:00
db:JVNDBid:JVNDB-2013-001343date:2013-02-01T00:00:00
db:CNNVDid:CNNVD-201301-564date:2013-01-31T00:00:00
db:NVDid:CVE-2013-1112date:2024-11-21T01:48:55.760

SOURCES RELEASE DATE
db:CNVDid:CNVD-2013-00615date:2013-01-31T00:00:00
db:VULHUBid:VHN-61114date:2013-01-31T00:00:00
db:BIDid:57604date:2013-01-28T00:00:00
db:JVNDBid:JVNDB-2013-001343date:2013-02-01T00:00:00
db:PACKETSTORMid:119881date:2013-01-29T06:19:35
db:CNNVDid:CNNVD-201301-564date:2013-01-31T00:00:00
db:NVDid:CVE-2013-1112date:2013-01-31T12:06:18.363