CVEvulnerability
CVE-2013-7312
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.4 MEDIUM — AV:A/AC:M/Au:N/C:P/I:P/A:P
Description
The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Affected configurations
• enterasys c5
• enterasys g3
• enterasys k10
• enterasys k6
• enterasys s130
• enterasys s140
• enterasys s150
• enterasys s155
• enterasys s180
References
- http://www.kb.cert.org/vuls/id/229804 US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-985QS8 US Government Resource
- https://community.enterasys.com/enterasys/topics/ensrt_product_advisory_vu_229804_ospf_lsa_lookup_identifers-il4n3 community.enterasys.com
- https://cp-enterasys.kb.net/article.aspx?article=15134&p=1 cp-enterasys.kb.net
- http://www.kb.cert.org/vuls/id/229804 US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-985QS8 US Government Resource
- https://community.enterasys.com/enterasys/topics/ensrt_product_advisory_vu_229804_ospf_lsa_lookup_identifers-il4n3 community.enterasys.com
- https://cp-enterasys.kb.net/article.aspx?article=15134&p=1 cp-enterasys.kb.net