Cisco ios xr software OSPFv3 DoS Vulnerability

Release date:
Updated on:

Affected Systems:
Cisco IOS XR
Description:
--------------------------------------------------------------------------------
Bugtraq id: 63563
CVE (CAN) ID: CVE-2013-5565

Cisco IOS is an interconnected network operating system used on most Cisco system routers and network switches.

The OSPFv3 Implementation of Cisco ios xr Software has a security vulnerability that can cause unauthenticated remote attackers to crash the OSPFv3 process. This vulnerability is caused by the failure to correctly parse malformed type 1 LSA packets.

<* Source: Cisco

Link: http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5565
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Cisco
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.cisco.com/en/US/products/hw/ps4159/ps4358/