CVE-2013-5474: Race Condition

Published Sep 27, 2013

Updated

Race condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.3 allows remote attackers to cause a denial of service (device reload or hang) via fragmented IPv6 packets, aka Bug ID CSCud64812.

Affected Software

7 affected components

Cisco IOS=12.2

Cisco IOS=12.3

Cisco IOS=12.4

Cisco IOS=15.0

Cisco IOS=15.1

Cisco IOS=15.2

Cisco IOS=15.3

Event History

Sep 27, 2013

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5474?

CVE-2013-5474 is classified as a high severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2013-5474?

To fix CVE-2013-5474, upgrade to a version of Cisco IOS that avoids this vulnerability, specifically versions later than 12.4 and 15.3.

What impact does CVE-2013-5474 have on affected devices?

CVE-2013-5474 can lead to denial of service on affected devices, causing them to reload or hang under certain conditions.

Which Cisco IOS versions are affected by CVE-2013-5474?

CVE-2013-5474 affects Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.3.

Can CVE-2013-5474 be exploited by remote attackers?

Yes, CVE-2013-5474 can be exploited by remote attackers using fragmented IPv6 packets.