Cisco IOS XR Fragmented Packet Processing Vulnerability

Last Update Date: 24 Oct 2013 10:42 Release Date: 24 Oct 2013 3213 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

A vulnerability has been identified in Cisco IOS XR. A remote user can cause denial of service conditions.

A remote user can send specially crafted fragmented packets to the target device to cause the target route processor to be unable to transmit packets to the fabric.

Impact

Denial of Service

System / Technologies affected

IOS XR 3.3.0 to 4.2.0

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix (XR 4.2.1).

Vulnerability Identifier

CVE-2013-5549

Source

SecurityTracker