CVE-2013-1143

Published: Mar 28, 2013Modified: Apr 29, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service (incorrect memory access and device reload) via a traffic engineering PATH message in an RSVP packet, aka Bug ID CSCtg39957.

Affected (25)

Products: Cisco: Ios, Ios Xe

Cisco

2 products

Ios

Ios Xe

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 12.2
Cisco Ios	Version 15.0
Cisco Ios	Version 15.0(1)se
Cisco Ios	Version 15.1
Cisco Ios	Version 15.2
Cisco Ios	Version 15.3

Configuration B

16 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 3.1.0s
Cisco Ios Xe	Version 3.1.1s
Cisco Ios Xe	Version 3.1.2s
Cisco Ios Xe	Version 3.1.3s
Cisco Ios Xe	Version 3.1.4s
Cisco Ios Xe	Version 3.2.0s
Cisco Ios Xe	Version 3.2.1s
Cisco Ios Xe	Version 3.2.2s
Cisco Ios Xe	Version 3.3.0s
Cisco Ios Xe	Version 3.3.1s
Cisco Ios Xe	Version 3.3.2s
Cisco Ios Xe	Version 3.3.3s
Cisco Ios Xe	Version 3.4.0s
Cisco Ios Xe	Version 3.4.1s
Cisco Ios Xe	Version 3.4.2s
Cisco Ios Xe	Version 3.4.3s