Cisco IOS XR Deny Service Vulnerability

Last Update Date: 30 Apr 2013 10:44 Release Date: 30 Apr 2013 3649 Views

RISK: Medium Risk

TYPE: Servers - Network Management

A vulnerability has been identified in Cisco IOS XR. A remote authenticated user can cause denial of service conditions.

A remote authenticated user can send specially crafted SNMP packets to trigger a memory leak in the SNMP process and consume all memory allocated to the process. The SNMP process will then restart.

Impact

Denial of Service

System / Technologies affected

Cisco IOS XR

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix.
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1216

Vulnerability Identifier

CVE-2013-1216

Source

SecurityTracker
Cisco