CVE-2013-5549

Published: Oct 25, 2013Modified: Apr 29, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service (transmission outage) via (1) IPv4 or (2) IPv6 traffic, aka Bug ID CSCuh30380.

Affected (16)

Products: Cisco: Ios Xr

Cisco

1 product

Ios Xr

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xr	Version 3.8.1
Cisco Ios Xr	Version 3.8.2
Cisco Ios Xr	Version 3.8.3
Cisco Ios Xr	Version 3.8.4
Cisco Ios Xr	Version 3.9.0
Cisco Ios Xr	Version 3.9.1
Cisco Ios Xr	Version 3.9.2
Cisco Ios Xr	Version 4.0.0
Cisco Ios Xr	Version 4.0.1
Cisco Ios Xr	Version 4.0.2
Cisco Ios Xr	Version 4.0.3
Cisco Ios Xr	Version 4.0.4
Cisco Ios Xr	Version 4.1.1
Cisco Ios Xr	Version 4.1.2
Cisco Ios Xr	Version 4.1
Cisco Ios Xr	Version 4.2.0

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iosxr

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131023-iosxr

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.