Boletines de Vulnerabilidades

Cisco IOS Software Multicast Network Time Protocol Denial of Service Vulnerability


Información sobre el sistema

   
Software afectado Cisco

Descripción

A vulnerability in the implementation of the Network Time Protocol (NTP) feature in Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition.The vulnerability is due to the improper handling of multicast NTP packets that are sent to an affected device encapsulated in a Multicast Source Discovery Protocol (MSDP) Source-Active (SA) message from a configured MSDP peer. An attacker could exploit this

More info:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130925-ntp?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20IOS%20Software%20Multicast%20Network%20Time%20Protocol%20Denial%20of%2

Identificadores estándar

Propiedad Valor
CVE CVE-2013-5472.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2013-09-26

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT