NVD

Id
36520  
Name
CVE-2013-0149  
Description
The OSPF implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.3, IOS-XE 2.x through 3.9.xS, ASA and PIX 7.x through 9.1, FWSM, NX-OS, and StarOS before 14.0.50488 does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a (1) unicast or (2) multicast packet, aka Bug IDs CSCug34485, CSCug34469, CSCug39762, CSCug63304, and CSCug39795.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-08-05  
Modified Date
2013-08-13  
Seq
2013-0149  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186471 36520 CVE-2013-0149 20130801 OSPF LSA Manipulation Vulnerability in Multiple Cisco Products  View
186472 36520 CVE-2013-0149 VU#229804  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22064 JVNDB-2013-003639 Open Shortest Path First (OSPF) プロトコルの Link State Advertisement (LSA) に関する問題 Open Shortest Path First (OSPF) プロトコルの仕様には、Link State Advertisement (LSA) の識別に関する問題が存在します。 CVE-2013-0149 60091 CVE-2013-0149 36520 5.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003639.html 2013-08-01 2013-10-23 View