CVE-2013-6982
published 2014-01-08CVE-2013-6982: The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled…
PriorityP422medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
2.83%
85.2th percentile
The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.
Affected
100 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | nx-os | <= 6.2\(2a\) | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
| cisco | nx-os | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8pvv-mj79-jpcq: The BGP implementation in Cisco NX-OS 6
ghsa_unreviewed·2022-05-17
CVE-2013-6982 [MEDIUM] CWE-20 GHSA-8pvv-mj79-jpcq: The BGP implementation in Cisco NX-OS 6
The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.
Cisco
Cisco NX-OS Software Crafted Border Gateway Protocol Update Message Denial of Service Vulnerability
vendor_cisco·2014-01-06·CVSS 4.3
CVE-2013-6982 [MEDIUM] CWE-20 Cisco NX-OS Software Crafted Border Gateway Protocol Update Message Denial of Service Vulnerability
Cisco NX-OS Software Crafted Border Gateway Protocol Update Message Denial of Service Vulnerability
A vulnerability in the Border Gateway Protocol (BGP) functionality of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause all BGP sessions on the device to reset.
The vulnerability is due to the improper processing of specifically crafted BGP update messages. An attacker could exploit this vulnerability by crafting a specific BGP-labeled update message. An exploit could allow the attacker to cause all the BGP peers on a Cisco NX-OS device that are configured with either a VPNv4, VPNv6, or IPv6 labeled unicast address family to reset.
Cisco has confirmed the vulnerability in a security notice and released software updates.
To exploit this vulnerability, it is li
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/101713http://secunia.com/advisories/56169http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6982http://tools.cisco.com/security/center/viewAlert.x?alertId=32325http://www.securityfocus.com/bid/64670http://www.securitytracker.com/id/1029568https://exchange.xforce.ibmcloud.com/vulnerabilities/90119http://osvdb.org/101713http://secunia.com/advisories/56169http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6982http://tools.cisco.com/security/center/viewAlert.x?alertId=32325http://www.securityfocus.com/bid/64670http://www.securitytracker.com/id/1029568https://exchange.xforce.ibmcloud.com/vulnerabilities/90119
2014-01-08
Published