4.3

CVE-2013-6982

The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Nx-os Version <= 6.2\(2a\)
Cisco ≫ Nx-os Version-
Cisco ≫ Nx-os Version4.0
Cisco ≫ Nx-os Version4.2
Cisco ≫ Nx-os Version5.0
Cisco ≫ Nx-os Version5.1
Cisco ≫ Nx-os Version5.2
Cisco ≫ Nx-os Version6.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.83% 0.848
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://osvdb.org/101713
http://secunia.com/advisories/56169
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6982
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32325
Vendor Advisory
http://www.securityfocus.com/bid/64670
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1029568
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90119