CVE-2013-6981: Input Validation
Published Dec 28, 2013
·Updated
Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packets, aka Bug ID CSCul00709.
Affected Software
29 affected components
Cisco IOS XE<=3.7s\(.1\)
Cisco IOS XE=2.5\(.0\)
Cisco IOS XE=2.6\(.0\)
Cisco IOS XE=2.6\(.1\)
Cisco IOS XE=2.6\(.2\)
Cisco IOS XE=3.1s\(.0\)
Cisco IOS XE=3.1s\(.1\)
Cisco IOS XE=3.1s\(.2\)
Cisco IOS XE=3.1s\(.3\)
Cisco IOS XE=3.2s\(.0\)
Cisco IOS XE=3.2s\(.1\)
Cisco IOS XE=3.2s\(.2\)
Cisco IOS XE=3.3s\(.0\)
Cisco IOS XE=3.3s\(.1\)
Cisco IOS XE=3.3s\(.2\)
Cisco IOS XE=3.4s\(.0\)
Cisco IOS XE=3.4s\(.1\)
Cisco IOS XE=3.4s\(.2\)
Cisco IOS XE=3.4s\(.3\)
Cisco IOS XE=3.4s\(.4\)
Cisco IOS XE=3.4s\(.5\)
Cisco IOS XE=3.4s\(.6\)
Cisco IOS XE=3.5s\(.0\)
Cisco IOS XE=3.5s\(.1\)
Cisco IOS XE=3.5s\(.2\)
Cisco IOS XE=3.6s\(.0\)
Cisco IOS XE=3.6s\(.1\)
Cisco IOS XE=3.6s\(.2\)
Cisco IOS XE=3.7s\(.0\)
Event History
Dec 28, 2013
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Data Sourced
via NVD·04:53 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6981?
The severity of CVE-2013-6981 is rated as medium with a score of 5.4.
2
How do I fix CVE-2013-6981?
To mitigate CVE-2013-6981, upgrade to a later version of Cisco IOS XE that addresses this vulnerability.
3
What type of attack does CVE-2013-6981 enable?
CVE-2013-6981 allows remote attackers to cause a denial of service through fragmented MPLS IP packets.
4
Which versions of Cisco IOS XE are affected by CVE-2013-6981?
CVE-2013-6981 affects Cisco IOS XE 3.7S and earlier versions.
5
What is the impact of CVE-2013-6981 on Cisco devices?
The impact of CVE-2013-6981 is that it can cause the packet processor on affected Cisco devices to crash, leading to a denial of service.