CVE-2013-7312 The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on....
MediumCVSS 5.4
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| enterasys c5 | All versions | No fix listed |
| enterasys g3 | All versions | No fix listed |
| enterasys k10 | All versions | No fix listed |
| enterasys k6 | All versions | No fix listed |
| enterasys s130 | All versions | No fix listed |
| enterasys s140 | All versions | No fix listed |
| enterasys s150 | All versions | No fix listed |
| enterasys s155 | All versions | No fix listed |
| enterasys s180 | All versions | No fix listed |
References
- VU#229804 third-party-advisory us-government-resource
- www.kb.cert.org us-government-resource
- community.enterasys.com
- cp-enterasys.kb.net