Buffer overflow in Cisco iOS

CVE-2013-1143

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service (incorrect memory access and device reload) via a traffic engineering PATH message in an RSVP packet, aka Bug ID CSCtg39957.

Vulnerability class: Buffer Overflow

EPSS: 0.014 (68.9th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 12.2, 15.0, 15.0\(1\)se
  • Cisco Ios_xe — versions 3.1.0s, 3.1.1s, 3.1.2s
  • N/a — versions n/a

Weakness classification (CWE)

References