CVEvulnerability

CVE-2013-6981

5.4 MEDIUM Published 2013-12-28 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2013-12-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.4 MEDIUM — AV:N/AC:H/Au:N/C:N/I:N/A:C
Weaknesses
CWE-20

Description

Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packets, aka Bug ID CSCul00709.

Affected configurations

• cisco ios xe (<= 3.7s\(.1\)) • cisco ios xe 2.5\(.0\) • cisco ios xe 2.6\(.0\) • cisco ios xe 2.6\(.1\) • cisco ios xe 2.6\(.2\) • cisco ios xe 3.1s\(.0\) • cisco ios xe 3.1s\(.1\) • cisco ios xe 3.1s\(.2\) • cisco ios xe 3.1s\(.3\) • cisco ios xe 3.2s\(.0\) • cisco ios xe 3.2s\(.1\) • cisco ios xe 3.2s\(.2\) • cisco ios xe 3.3s\(.0\) • cisco ios xe 3.3s\(.1\) • cisco ios xe 3.3s\(.2\) • cisco ios xe 3.4s\(.0\) • cisco ios xe 3.4s\(.1\) • cisco ios xe 3.4s\(.2\) • cisco ios xe 3.4s\(.3\) • cisco ios xe 3.4s\(.4\) • cisco ios xe 3.4s\(.5\) • cisco ios xe 3.4s\(.6\) • cisco ios xe 3.5s\(.0\) • cisco ios xe 3.5s\(.1\) • cisco ios xe 3.5s\(.2\) • cisco ios xe 3.6s\(.0\) • cisco ios xe 3.6s\(.1\) • cisco ios xe 3.6s\(.2\) • cisco ios xe 3.7s\(.0\)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References