CVE-2013-3410: Buffer Overflow
Published Jul 18, 2013
·Updated
Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977.
Affected Software
11 affected components
Cisco Intrusion Prevention System<=7.0\(8\)e4
Cisco Intrusion Prevention System=7.0
Cisco Intrusion Prevention System=7.0\(1\)e3
Cisco Intrusion Prevention System=7.0\(2\)e3
Cisco Intrusion Prevention System=7.0\(2\)e4
Cisco Intrusion Prevention System=7.0\(3\)e4
Cisco Intrusion Prevention System=7.0\(4\)e4
Cisco Intrusion Prevention System=7.0\(5a\)e4
Cisco Intrusion Prevention System=7.0\(6\)e4
Cisco Intrusion Prevention System=7.0\(7\)e4
Cisco IPS NME
Event History
Jul 18, 2013
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3410?
CVE-2013-3410 is classified as a denial of service vulnerability that can lead to device reload.
2
How do I fix CVE-2013-3410?
To mitigate CVE-2013-3410, upgrade the Cisco Intrusion Prevention System software to version 7.0(9)E4 or later.
3
Which versions are affected by CVE-2013-3410?
CVE-2013-3410 affects Cisco Intrusion Prevention System versions prior to 7.0(9)E4.
4
What kind of attack does CVE-2013-3410 allow?
CVE-2013-3410 allows remote attackers to cause a denial of service via malformed IPv4 packets.
5
Is CVE-2013-3410 a critical vulnerability?
While CVE-2013-3410 is not designated as critical, it poses a significant risk as it can lead to service interruptions.