CVE-2013-5478: Input Validation
First published: Fri Sep 27 2013(Updated: )
Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service (interface queue wedge) via crafted UDP RSVP packets, aka Bug ID CSCuf17023.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS | =15.0 | |
| Cisco IOS | =15.1 | |
| Cisco IOS | =15.2 | |
| Cisco IOS | =15.3 | |
| Cisco IOS XE Software | =3.2.00.xo.15.0\(2\)xo | |
| Cisco IOS XE Software | =3.2.0s | |
| Cisco IOS XE Software | =3.2.0sg | |
| Cisco IOS XE Software | =3.2.0xo | |
| Cisco IOS XE Software | =3.2.1s | |
| Cisco IOS XE Software | =3.2.1sg | |
| Cisco IOS XE Software | =3.2.2s | |
| Cisco IOS XE Software | =3.2.2sg | |
| Cisco IOS XE Software | =3.2.3sg | |
| Cisco IOS XE Software | =3.2.4sg | |
| Cisco IOS XE Software | =3.3.0s | |
| Cisco IOS XE Software | =3.3.0sg | |
| Cisco IOS XE Software | =3.3.1s | |
| Cisco IOS XE Software | =3.3.1sg | |
| Cisco IOS XE Software | =3.3.2s | |
| Cisco IOS XE Software | =3.3.3s | |
| Cisco IOS XE Software | =3.4.0as | |
| Cisco IOS XE Software | =3.4.0s | |
| Cisco IOS XE Software | =3.4.1s | |
| Cisco IOS XE Software | =3.4.2s | |
| Cisco IOS XE Software | =3.4.3s | |
| Cisco IOS XE Software | =3.4.4s | |
| Cisco IOS XE Software | =3.4.5s | |
| Cisco IOS XE Software | =3.4.xs | |
| Cisco IOS XE Software | =3.5.0s | |
| Cisco IOS XE Software | =3.5.1s | |
| Cisco IOS XE Software | =3.5.2s | |
| Cisco IOS XE Software | =3.5.xs | |
| Cisco IOS XE Software | =3.6.0s | |
| Cisco IOS XE Software | =3.6.1s | |
| Cisco IOS XE Software | =3.6.2s | |
| Cisco IOS XE Software | =3.7.0s | |
| Cisco IOS XE Software | =3.7.1s | |
| Cisco IOS XE Software | =3.8.0s |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-5478?
CVE-2013-5478 has a high severity rating due to its potential to cause a denial of service on affected devices.
How do I fix CVE-2013-5478?
To fix CVE-2013-5478, upgrade your Cisco IOS or IOS XE software to a version that addresses this vulnerability.
Which Cisco IOS and IOS XE versions are affected by CVE-2013-5478?
CVE-2013-5478 affects Cisco IOS versions 15.0 through 15.3 and Cisco IOS XE versions 3.2 through 3.8.
What is the impact of CVE-2013-5478 on my network?
The impact of CVE-2013-5478 can lead to a denial of service, potentially disrupting network services by wedging the interface queue.
Is remote exploitation possible for CVE-2013-5478?
Yes, CVE-2013-5478 allows remote attackers to exploit the vulnerability through crafted UDP RSVP packets.
- agent/type
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios
- version/cisco ios/15.0
- version/cisco ios/15.1
- version/cisco ios/15.2
- version/cisco ios/15.3
- canonical/cisco ios xe
- version/cisco ios xe/3.2.00.xo.15.0\(2\)xo
- version/cisco ios xe/3.2.0s
- version/cisco ios xe/3.2.0sg
- version/cisco ios xe/3.2.0xo
- version/cisco ios xe/3.2.1s
- version/cisco ios xe/3.2.1sg
- version/cisco ios xe/3.2.2s
- version/cisco ios xe/3.2.2sg
- version/cisco ios xe/3.2.3sg
- version/cisco ios xe/3.2.4sg
- version/cisco ios xe/3.3.0s
- version/cisco ios xe/3.3.0sg
- version/cisco ios xe/3.3.1s
- version/cisco ios xe/3.3.1sg
- version/cisco ios xe/3.3.2s
- version/cisco ios xe/3.3.3s
- version/cisco ios xe/3.4.0as
- version/cisco ios xe/3.4.0s
- version/cisco ios xe/3.4.1s
- version/cisco ios xe/3.4.2s
- version/cisco ios xe/3.4.3s
- version/cisco ios xe/3.4.4s
- version/cisco ios xe/3.4.5s
- version/cisco ios xe/3.4.xs
- version/cisco ios xe/3.5.0s
- version/cisco ios xe/3.5.1s
- version/cisco ios xe/3.5.2s
- version/cisco ios xe/3.5.xs
- version/cisco ios xe/3.6.0s
- version/cisco ios xe/3.6.1s
- version/cisco ios xe/3.6.2s
- version/cisco ios xe/3.7.0s
- version/cisco ios xe/3.7.1s
- version/cisco ios xe/3.8.0s