CVE-2013-1164

High

Description

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 multicast packets, aka Bug ID CSCtz97563.

SeverityHigh
CVSS7.8
Exploit probability—
ProductCisco Ios Xe
PublishedApr 11, 2013
First seenApr 11, 2013

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
cisco ios_xe3.4.0as, 3.4.0s, 3.4.1s, 3.4.2s, 3.4.3s, 3.5.0s, 3.6.0s—
cisco asr_1001No range specified—
cisco asr_1002No range specified—
cisco asr_1002-xNo range specified—
cisco asr_1004No range specified—
cisco asr_1006No range specified—
cisco asr_1013No range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2013-1164 · Cisco Ios Xe · Dark Radar