CVE-2013-5474: cisco ios Race Condition

Vulnerability summary

CVE-2013-5474 is a high (CVSS 7.8) Race Condition vulnerability in cisco ios. EPSS estimates a 1.44% chance of exploitation in the next 30 days, higher than 73% of scored vulnerabilities.

Timeline

1. 27-09-2013
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

Race condition in the IPv6 virtual fragmentation reassembly (VFR) implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.3 allows remote attackers to cause a denial of service (device reload or hang) via fragmented IPv6 packets, aka Bug ID CSCud64812.

• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.