CVE-2013-1218: Buffer Overflow
Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1218?
CVE-2013-1218 has a severity rating that can lead to significant denial of service events affecting network availability.
How do I fix CVE-2013-1218?
To fix CVE-2013-1218, upgrade the Cisco IPS or ASA 5500-X software to a version that is 7.1(7)sp1E4 or later.
What devices are affected by CVE-2013-1218?
CVE-2013-1218 affects Cisco ASA 5500-X series IPS SSP software and various models of Cisco intrusion prevention and detection systems.
Can CVE-2013-1218 be exploited remotely?
Yes, CVE-2013-1218 can be exploited remotely by sending specially crafted fragmented packets.
What type of attack does CVE-2013-1218 facilitate?
CVE-2013-1218 facilitates denial of service attacks by causing the Analysis Engine process to hang or the device to reload.