CVE-2013-0149
Description
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a (1) unicast or (2) multicast packet, aka Bug IDs CSCug34485, CSCug34469, CSCug39762, CSCug63304, and CSCug39795.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | 12.0, 12.0\(1\), 12.0\(1\)s, 12.0\(1\)st, 12.0\(1\)w, 12.0\(1\)xa3, 12.0\(1\)xb, 12.0\(1\)xe, 12.0\(2\), 12.0\(2\)xc, 12.0\(2\)xd, 12.0\(2\)xe, 12.0\(2\)xf, 12.0\(2\)xg, 12.0\(2a\), 12.0\(2b\), 12.0\(3\), 12.0\(3\)t2, 12.0\(3\)xe, 12.0\(3.2\), 12.0\(3.3\)s, 12.0\(3.4\)t, 12.0\(3.6\)w5\(9.0.5\), 12.0\(3d\), 12.0\(4\), 12.0\(4\)s, 12.0\(4\)t, 12.0\(4\)xe, 12.0\(4\)xe1, 12.0\(4\)xm, 12.0\(4\)xm1, 12.0\(5\), 12.0\(5\)s, 12.0\(5\)t, 12.0\(5\)t1, 12.0\(5\)t2, 12.0\(5\)wc, 12.0\(5\)wc2, 12.0\(5\)wc2b, 12.0\(5\)wc3, 12.0\(5\)wc3b, 12.0\(5\)wc5a, 12.0\(05\)wc8, 12.0\(5\)wc9, 12.0\(5\)wc9a, 12.0\(5\)wc11, 12.0\(5\)wc13, 12.0\(5\)wx, 12.0\(5\)xe, 12.0\(5\)xk, 12.0\(5\)xk2, 12.0\(5\)xn, 12.0\(5\)xn1, 12.0\(5\)xs, 12.0\(5\)xu, 12.0\(5\)yb4, 12.0\(5.1\)xp, 12.0\(5.2\)xu, 12.0\(5.3\)wc1, 12.0\(5.4\)wc1, 12.0\(5a\)e, 12.0\(6\), 12.0\(6b\), 12.0\(7\)db2, 12.0\(7\)dc1, 12.0\(7\)s1, 12.0\(7\)sc, 12.0\(7\)t, 12.0\(7\)t2, 12.0\(7\)t3, 12.0\(7\)wx5\(15a\), 12.0\(7\)xe, 12.0\(7\)xe2, 12.0\(7\)xf, 12.0\(7\)xf1, 12.0\(7\)xk, 12.0\(7\)xk2, 12.0\(7\)xk3, 12.0\(7\)xv, 12.0\(7.4\)s, 12.0\(7a\), 12.0\(8\), 12.0\(8\)s1, 12.0\(8.0.2\)s, 12.0\(8.3\)sc, 12.0\(8a\), 12.0\(9\), 12.0\(9\)s, 12.0\(9\)s8, 12.0\(9a\), 12.0\(10\), 12.0\(10\)s3b, 12.0\(10\)s7, 12.0\(10\)s8, 12.0\(10\)w5, 12.0\(10\)w5\(18f\), 12.0\(10\)w5\(18g\), 12.0\(10a\), 12.0\(11\)s6, 12.0\(11\)st4, 12.0\(11a\), 12.0\(12\), 12.0\(12\)s3, 12.0\(12\)s4, 12.0\(12a\), 12.0\(13\)s6, 12.0\(13\)s8, 12.0\(13\)w5\(19c\), 12.0\(13\)wt6\(1\), 12.0\(13a\), 12.0\(14\), 12.0\(14\)s7, 12.0\(14\)s8, 12.0\(14\)st, 12.0\(14\)st3, 12.0\(14\)w5\(20\), 12.0\(14a\), 12.0\(15\)s, 12.0\(15\)s3, 12.0\(15\)s6, 12.0\(15\)s7, 12.0\(15\)sc, 12.0\(15\)sl, 12.0\(15a\), 12.0\(16\)s, 12.0\(16\)s8, 12.0\(16\)s8a, 12.0\(16\)s10, 12.0\(16\)sc, 12.0\(16\)sc3, 12.0\(16\)st, 12.0\(16\)st1, 12.0\(16\)w5\(21\), 12.0\(16.06\)s, 12.0\(16a\), 12.0\(17\), 12.0\(17\)s, 12.0\(17\)s4, 12.0\(17\)s7, 12.0\(17\)sl, 12.0\(17\)sl2, 12.0\(17\)sl6, 12.0\(17\)sl9, 12.0\(17\)st1, 12.0\(17\)st5, 12.0\(17\)st8, 12.0\(17a\), 12.0\(18\)s, 12.0\(18\)s5, 12.0\(18\)s5a, 12.0\(18\)s7, 12.0\(18\)sl, 12.0\(18\)st1, 12.0\(18\)w5\(22b\), 12.0\(18b\), 12.0\(19\), 12.0\(19\)s, 12.0\(19\)s2, 12.0\(19\)s2a, 12.0\(19\)s4, 12.0\(19\)sl, 12.0\(19\)sl4, 12.0\(19\)sp, 12.0\(19\)st, 12.0\(19\)st2, 12.0\(19\)st6, 12.0\(19a\), 12.0\(20\)sl, 12.0\(20\)sp, 12.0\(20\)sp1, 12.0\(20\)st2, 12.0\(20\)st6, 12.0\(20\)st7, 12.0\(20\)sx, 12.0\(20\)w5\(22b\), 12.0\(20.4\)sp, 12.0\(20a\), 12.0\(21\)s, 12.0\(21\)s1, 12.0\(21\)s3, 12.0\(21\)s4a, 12.0\(21\)s5a, 12.0\(21\)s6, 12.0\(21\)s7, 12.0\(21\)sl, 12.0\(21\)st, 12.0\(21\)st6, 12.0\(21\)st7, 12.0\(21\)sx, 12.0\(21a\), 12.0\(22\)s, 12.0\(22\)s4, 12.0\(22\)s5, 12.0\(22\)sy, 12.0\(23\)s2, 12.0\(23\)s3, 12.0\(23\)s4, 12.0\(23\)s5, 12.0\(23\)s6, 12.0\(23\)sx | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.