CVE-2013-1145: High severity cisco ios vulnerability

Published Mar 28, 2013

Updated

Memory leak in Cisco IOS 12.2, 12.4, 15.0, and 15.1, when Zone-Based Policy Firewall SIP application layer gateway inspection is enabled, allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed SIP messages, aka Bug ID CSCtl99174.

Affected Software

4 affected components

Cisco IOS=12.2

Cisco IOS=12.4

Cisco IOS=15.0

Cisco IOS=15.1

Event History

Mar 28, 2013

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1145?

CVE-2013-1145 is classified as a denial of service vulnerability that can lead to memory consumption or device reload.

Which versions of Cisco IOS are affected by CVE-2013-1145?

CVE-2013-1145 affects Cisco IOS versions 12.2, 12.4, 15.0, and 15.1.

How do I fix CVE-2013-1145?

To fix CVE-2013-1145, you should disable the Zone-Based Policy Firewall SIP application layer gateway inspection or update to a patched version of Cisco IOS.

What causes the vulnerability CVE-2013-1145?

CVE-2013-1145 is caused by a memory leak triggered by malformed SIP messages when SIP inspection is enabled.

Who can exploit CVE-2013-1145?

Remote attackers can exploit CVE-2013-1145 to cause a denial of service by sending malformed SIP messages.