CVE-2013-1143: Buffer Overflow

Published Mar 28, 2013

Updated

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service (incorrect memory access and device reload) via a traffic engineering PATH message in an RSVP packet, aka Bug ID CSCtg39957.

Affected Software

25 affected components

cisco IOS=12.2

cisco IOS=15.0

cisco IOS=15.0\(1\)se

cisco IOS=15.1

cisco IOS=15.2

cisco IOS=15.3

Cisco IOS XE=3.1.0s

Cisco IOS XE=3.1.1s

Cisco IOS XE=3.1.2s

Cisco IOS XE=3.1.3s

Cisco IOS XE=3.1.4s

Cisco IOS XE=3.2.0s

Cisco IOS XE=3.2.1s

Cisco IOS XE=3.2.2s

Cisco IOS XE=3.3.0s

Cisco IOS XE=3.3.1s

Cisco IOS XE=3.3.2s

Cisco IOS XE=3.3.3s

Cisco IOS XE=3.4.0s

Cisco IOS XE=3.4.1s

Cisco IOS XE=3.4.2s

Cisco IOS XE=3.4.3s

Cisco IOS XE=3.5.0s

Cisco IOS XE=3.5.1s

Cisco IOS XE=3.5.2s

Event History

Mar 28, 2013

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1143?

CVE-2013-1143 is classified as a high severity vulnerability due to its ability to cause a denial of service.

How do I fix CVE-2013-1143?

To mitigate CVE-2013-1143, upgrade Cisco IOS or IOS XE to a version that addresses this vulnerability.

What devices are affected by CVE-2013-1143?

CVE-2013-1143 affects various versions of Cisco IOS and IOS XE, specifically those in the 12.2, 15.0 to 15.2, and 3.1.xS to 3.7.xS series.

What impact does CVE-2013-1143 have on networks?

CVE-2013-1143 can lead to incorrect memory access and device reloads, resulting in network downtime.

Is CVE-2013-1143 remotely exploitable?

Yes, CVE-2013-1143 can be exploited by remote attackers if MPLS-TE is enabled.