CVEvulnerability
CVE-2013-0149
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-08-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:P
Description
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a (1) unicast or (2) multicast packet, aka Bug IDs CSCug34485, CSCug34469, CSCug39762, CSCug63304, and CSCug39795.
Affected configurations
• cisco ios 12.0
• cisco ios 12.0\(1\)
• cisco ios 12.0\(1\)s
• cisco ios 12.0\(1\)st
• cisco ios 12.0\(1\)w
• cisco ios 12.0\(1\)xa3
• cisco ios 12.0\(1\)xb
• cisco ios 12.0\(1\)xe
• cisco ios 12.0\(2\)
• cisco ios 12.0\(2\)xc
• cisco ios 12.0\(2\)xd
• cisco ios 12.0\(2\)xe
• cisco ios 12.0\(2\)xf
• cisco ios 12.0\(2\)xg
• cisco ios 12.0\(2a\)
• cisco ios 12.0\(2b\)
• cisco ios 12.0\(3\)
• cisco ios 12.0\(3\)t2
• cisco ios 12.0\(3\)xe
• cisco ios 12.0\(3.2\)
• cisco ios 12.0\(3.3\)s
• cisco ios 12.0\(3.4\)t
• cisco ios 12.0\(3.6\)w5\(9.0.5\)
• cisco ios 12.0\(3d\)
• cisco ios 12.0\(4\)
• cisco ios 12.0\(4\)s
• cisco ios 12.0\(4\)t
• cisco ios 12.0\(4\)xe
• cisco ios 12.0\(4\)xe1
• cisco ios 12.0\(4\)xm
• cisco ios 12.0\(4\)xm1
• cisco ios 12.0\(5\)
• cisco ios 12.0\(5\)s
• cisco ios 12.0\(5\)t
• cisco ios 12.0\(5\)t1
• cisco ios 12.0\(5\)t2
• cisco ios 12.0\(5\)wc
• cisco ios 12.0\(5\)wc2
• cisco ios 12.0\(5\)wc2b
• cisco ios 12.0\(5\)wc3
• cisco ios 12.0\(5\)wc3b
• cisco ios 12.0\(5\)wc5a
• cisco ios 12.0\(05\)wc8
• cisco ios 12.0\(5\)wc9
• cisco ios 12.0\(5\)wc9a
• cisco ios 12.0\(5\)wc11
• cisco ios 12.0\(5\)wc13
• cisco ios 12.0\(5\)wx
• cisco ios 12.0\(5\)xe
• cisco ios 12.0\(5\)xk
• cisco ios 12.0\(5\)xk2
• cisco ios 12.0\(5\)xn
• cisco ios 12.0\(5\)xn1
• cisco ios 12.0\(5\)xs
• cisco ios 12.0\(5\)xu
• cisco ios 12.0\(5\)yb4
• cisco ios 12.0\(5.1\)xp
• cisco ios 12.0\(5.2\)xu
• cisco ios 12.0\(5.3\)wc1
• cisco ios 12.0\(5.4\)wc1
… and 506 more
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130801-lsaospf Vendor Advisory
- http://www.kb.cert.org/vuls/id/229804 US Government Resource
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130801-lsaospf Vendor Advisory
- http://www.kb.cert.org/vuls/id/229804 US Government Resource