Cisco IOS XR Software Fragmented Packets Processing Denial of Service Vulnerability

Bugtraq ID:	63298
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2013-5549
Remote:	Yes
Local:	No
Published:	Oct 23 2013 12:00AM
Updated:	Oct 23 2013 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Ios Xr 4.2 Cisco Ios Xr 4.1.2 Cisco Ios Xr 4.0.4 Cisco IOS XR 3.9.1 Cisco IOS XR 3.9 Cisco IOS XR 3.8.4 Cisco IOS XR 3.8.3 Cisco IOS XR 3.8.2 Cisco IOS XR 3.8.1 Cisco IOS XR 3.8 Cisco IOS XR 3.7.3 Cisco IOS XR 3.7.2 Cisco IOS XR 3.7.1 Cisco IOS XR 3.7 Cisco IOS XR 3.6.3 Cisco IOS XR 3.6.2 Cisco IOS XR 3.6.1 Cisco IOS XR 3.6 Cisco IOS XR 3.5.4 Cisco IOS XR 3.5.3 Cisco IOS XR 3.5.2 Cisco IOS XR 3.4.3 Cisco IOS XR 3.4.2 Cisco IOS XR 3.4.1 Cisco IOS XR 3.4 Cisco IOS XR 3.3.4 Cisco IOS XR 3.3.3 Cisco IOS XR 3.3.2 Cisco IOS XR 3.3.1 Cisco IOS XR 3.3 Cisco Ios Xr 4.1.1 Cisco Ios Xr 4.1.0 Cisco Ios Xr 4.0.3 Cisco Ios Xr 4.0.3 Cisco Ios Xr 4.0.1 Cisco Ios Xr 4.0.0 Cisco Ios Xr 3.9.2
Not Vulnerable:

Cisco IOS XR Software Fragmented Packets Processing Denial of Service Vulnerability

Cisco IOS XR Software is prone to a denial-of-service vulnerability.

Successfully exploiting this issue may allow an attacker to cause a denial-of-service condition.

This issue is being tracked by Cisco Bug ID CSCuh30380.

Cisco IOS XR 3.3.0 through versions 4.2.0 are vulnerable.

Cisco IOS XR Software Fragmented Packets Processing Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS XR Software Fragmented Packets Processing Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.