CVE-2013-1173 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Anyconnect Secure Mobility Client

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources
Severity
6.6MEDIUMNVD
EPSS
0.1%
top 74.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Anyconnect Secure Mobility Client
Timeline
PublishedApr 11
Latest updateMay 17

Description

Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 2.7 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-w9fv-cx3x-h3pg: Heap-based buffer overflow in ciscod↗2022-05-17
▶
CVEList
CVE-2013-1173: Heap-based buffer overflow in ciscod↗2013-04-11
▶

📋Vendor Advisories

2
Cisco
Cisco Host Scan Component of AnyConnect Secure Mobility and Secure Desktop Heap Overflow Vulnerability↗2013-04-11
▶
Red Hat
Kernel: net: af_key: initialize satype in key_notify_policy_flush↗2013-02-18
▶
CVE-2013-1173 — Cisco vulnerability | cvebase