CVE-2013-4806

Summary

CVE	CVE-2013-4806
State	PUBLISHED
Assigner	hp
Source Priority	CVE Program / NVD first with legacy fallback
Published	2013-08-12 10:58:49 UTC
Updated	2026-04-29 01:13:23 UTC
Description	The OSPF implementation on HP JD9##A routers; HP J4###A, J484#B, J8###A, JD3##A, JE###A, and JF55#A switches; HP 3COM routers and switches; and HP H3C routers and switches does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote authenticated users to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Primary CVSS: v2.0 7 from [email protected]

AV:N/AC:M/Au:S/C:P/I:N/A:C

Problem Types: NVD-CWE-noinfo | n/a

Access Vector

Network

Access Complexity

Medium

Authentication

Single

Confidentiality

Partial

Integrity

None

Availability

Complete

AV:N/AC:M/Au:S/C:P/I:N/A:C

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Hp	3com Router	3012	All	All	All
Hardware	Hp	3com Router	3018	All	All	All
Hardware	Hp	3com Router	5012	All	All	All
Hardware	Hp	3com Router	5232	All	All	All
Hardware	Hp	3com Router	5642	All	All	All
Hardware	Hp	3com Router	5642_taa	All	All	All
Hardware	Hp	3com Router	5682	All	All	All
Hardware	Hp	5500-24g-4sfp Hi Switch With 2 Interface Slots	jg311a	All	All	All
Hardware	Hp	5500-24g-poe Ei Switch	jd378a	All	All	All
Hardware	Hp	5500-24g-poe Si Switch	jd371a	All	All	All
Hardware	Hp	5500-24g-sfp Dc Ei Switch	jd379a	All	All	All
Hardware	Hp	5500-24g-sfp Ei Switch	jd374a	All	All	All
Hardware	Hp	5500-24g Dc Ei Switch	jd373a	All	All	All
Hardware	Hp	5500-24g Ei Switch	jd377a	All	All	All
Hardware	Hp	5500-24g Si Switch	jd369a	All	All	All
Hardware	Hp	5500-48g-poe Ei Switch	jd376a	All	All	All
Hardware	Hp	5500-48g-poe Si Switch	jd372a	All	All	All
Hardware	Hp	5500-48g Ei Switch	jd375a	All	All	All
Hardware	Hp	5500-48g Si Switch	jd370a	All	All	All
Hardware	Hp	5500g-24 Ei 10/100/1000 No Power Supply Unit Switch	jf551a	All	All	All
Hardware	Hp	5500g-24 Ei Sfp No Power Supply Unit Switch	jf553a	All	All	All
Hardware	Hp	5500g-48 Ei 10/100/1000 No Power Supply Unit Switch	jf552a	All	All	All
Hardware	Hp	H3c Ethernet Switch	s5600-26c	All	All	All
Hardware	Hp	H3c Ethernet Switch	s5600-26c-pwr	All	All	All
Hardware	Hp	H3c Ethernet Switch	s5600-26f	All	All	All
Hardware	Hp	H3c Ethernet Switch	s5600-50c	All	All	All
Hardware	Hp	H3c Ethernet Switch	s5600-50c-pwr	All	All	All

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

Reference	Source	Link	Tags
h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay	af854a3a-2127-422b-91ae-364da2661108	h20564.www2.hp.com	Vendor Advisory
Vulnerability Note VU#229804 - Open Shortest Path First (OSPF) Protocol does not specify unique LSA lookup identifers	af854a3a-2127-422b-91ae-364da2661108	www.kb.cert.org	US Government Resource
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.