CVEvulnerability

CVE-2013-7314

6.8 MEDIUM Published 2014-01-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-01-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Affected configurations

• nec ip38x 1000 • nec ip38x 105 • nec ip38x 107e • nec ip38x 1100 • nec ip38x 1200 • nec ip38x 140 • nec ip38x 1500 • nec ip38x 2000 • nec ip38x 250i • nec ip38x 300 • nec ip38x 3000 • nec ip38x 810

References