Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Cisco IOS XE on ASR 1000 routers can crash from crafted IPv6 packets

CVE-2013-2779 · published 13 years ago
Summary

The IOS XE software versions used on Cisco ASR 1000 series routers have a flaw in the multicast handling code. An attacker who sends specially fragmented IPv6 VPN packets can make the router reload, causing a temporary loss of network service. Upgrade the router to the latest IOS XE release that includes the fix, or apply Cisco's recommended patch as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco ios_xe 3.6.0s
3.4.0as
3.4.0s
3.4.1s
3.4.2s
3.4.3s
3.4.4s
3.4.xs
3.5.0s
3.5.1s
3.5.2s
3.5.xs
3 more version ranges
cpe:2.3:o:cisco:ios_xe:3.6.0s:*:*:*:*:*:*:*
cisco asr_1001 All versions
cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*
cisco asr_1002 All versions
cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*
cisco asr_1002-x All versions
cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*
cisco asr_1002_fixed_router All versions
cpe:2.3:h:cisco:asr_1002_fixed_router:-:*:*:*:*:*:*:*
cisco asr_1004 All versions
cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*
cisco asr_1006 All versions
cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*
cisco asr_1013 All versions
cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*
cisco asr_1023_router All versions
cpe:2.3:h:cisco:asr_1023_router:-:*:*:*:*:*:*:*
Original advisory text
Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) ...
Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, which allows remote attackers to cause a denial of service (card reload) via fragmented IPv6 MVPN (aka MVPNv6) packets, aka Bug ID CSCub34945, a different vulnerability than CVE-2013-1164.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.8 High
Exploitation
2% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published11 Apr 2013
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2013-2779 · NVD
Track software like this
Free during beta