Buffer overflow in Cisco Intrusion Prevention System

CVE-2013-3410

Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977.

Vulnerability class: Buffer Overflow

EPSS: 0.013 (68.2th percentile) — read the EPSS interpretation.

Affected products

Cisco Intrusion_prevention_system — versions 7.0, 7.0\(1\)e3, 7.0\(2\)e3
Cisco Ips_nme
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)