The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/87762 | vdb entry |
http://osvdb.org/98253 | vdb entry |
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5527 | vendor advisory |
http://www.securityfocus.com/bid/62904 | vdb entry third party advisory |