CVE-2013-5469 in Cisco IOS

Résumé (Anglaise)

The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service (flood of ACK packets) via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399.

Réserver

22/08/2013

Divulgation

30/08/2013

Entrées

VulDB provides additional information and datapoints for this CVE:

ID	Vulnérabilité	CWE	Exp	Con	CVE
10101	Cisco IOS TCP Stack buffer overflow	119	Non prouvée	Correctif officiel	CVE-2013-5469