CVE-2013-1218: Buffer Overflow
First published: Thu Jul 18 2013(Updated: )
Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco ASA 5500-X series IPS SSP Software | =7.1 | |
| Cisco Intrusion Prevention System | <=7.1 | |
| Cisco ASA 5585-X | ||
| Cisco Intrusion Detection System (IDS) | ||
| Cisco IPS Sensor Software | ||
| Cisco IPS Sensor Software | ||
| Cisco IPS Sensor Software | ||
| Cisco IPS 4520 sensor | ||
| Cisco IPS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-1218?
CVE-2013-1218 has a severity rating that can lead to significant denial of service events affecting network availability.
How do I fix CVE-2013-1218?
To fix CVE-2013-1218, upgrade the Cisco IPS or ASA 5500-X software to a version that is 7.1(7)sp1E4 or later.
What devices are affected by CVE-2013-1218?
CVE-2013-1218 affects Cisco ASA 5500-X series IPS SSP software and various models of Cisco intrusion prevention and detection systems.
Can CVE-2013-1218 be exploited remotely?
Yes, CVE-2013-1218 can be exploited remotely by sending specially crafted fragmented packets.
What type of attack does CVE-2013-1218 facilitate?
CVE-2013-1218 facilitates denial of service attacks by causing the Analysis Engine process to hang or the device to reload.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/severity
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco asa 5500-x series ips ssp software
- version/cisco asa 5500-x series ips ssp software/7.1
- canonical/cisco intrusion prevention system
- version/cisco intrusion prevention system/7.1
- canonical/cisco asa 5585-x
- canonical/cisco intrusion detection system (ids)
- canonical/cisco ips sensor software
- canonical/cisco ips 4520 sensor
- canonical/cisco ips