CVE-2013-1142: Race Condition
Published Mar 28, 2013
·Updated
Race condition in the VRF-aware NAT feature in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 allows remote attackers to cause a denial of service (memory consumption) via IPv4 packets, aka Bug IDs CSCtg47129 and CSCtz96745.
Affected Software
2 affected components
Cisco IOS>=12.2<=12.4
Cisco IOS>=15.0<=15.2
Event History
Mar 28, 2013
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1142?
CVE-2013-1142 has a moderate severity rating due to its potential to cause a denial of service.
2
How do I fix CVE-2013-1142?
To mitigate CVE-2013-1142, upgrade to the latest version of Cisco IOS that is not vulnerable to this bug.
3
What versions of Cisco IOS are affected by CVE-2013-1142?
CVE-2013-1142 affects Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.2.
4
What type of attack does CVE-2013-1142 facilitate?
CVE-2013-1142 allows remote attackers to exploit a race condition to cause memory consumption, leading to a denial of service.
5
Is CVE-2013-1142 specific to certain hardware?
CVE-2013-1142 is related specifically to vulnerabilities in Cisco IOS software, not hardware.