Cisco IOS XE Software MPLS IP Fragmentation Denial of Service Vulnerability

Bugtraq ID:	64514
Class:	Input Validation Error
CVE:	CVE-2013-6981
Remote:	Yes
Local:	No
Published:	Dec 24 2013 12:00AM
Updated:	Dec 26 2013 10:10AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco IOS XE Software MPLS IP Fragmentation Denial of Service Vulnerability

Cisco IOS XE is prone to a remote denial-of-service vulnerability.

Successful exploits will allow attackers to cause the CPP process to crash, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCul00709.

Cisco IOS XE Software MPLS IP Fragmentation Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS XE Software MPLS IP Fragmentation Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS XE Software MPLS IP Fragmentation Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco)