CVE-2013-6982

Cisco NX-OS < 6.2(2a) - Denial of Service via Crafted BGP UPDATE Message

Title source: llm

Description

The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.

References (7)

Core 7

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6982

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1029568

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/90119

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=32325

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/101713

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/56169

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/64670

Scores

EPSS 0.0283

EPSS Percentile 85.0%

Details

CWE

CWE-20

Status published

Products (50)

cisco/nx-os

cisco/nx-os 4.0

cisco/nx-os 4.0\(0\)n1\(1a\)

cisco/nx-os 4.0\(0\)n1\(2\)

cisco/nx-os 4.0\(0\)n1\(2a\)

cisco/nx-os 4.0\(1a\)n1\(1\)

cisco/nx-os 4.0\(1a\)n1\(1a\)

cisco/nx-os 4.0\(1a\)n2\(1\)

cisco/nx-os 4.0\(1a\)n2\(1a\)

cisco/nx-os 4.0\(4\)sv1\(1\)

... and 40 more

Published Jan 08, 2014

Tracked Since Feb 18, 2026