Details of VAR-201305-0268

ID

VAR-201305-0268

CVE

CVE-2013-1136

TITLE

Cisco Aggregation Services Router Route Processor Run on Cisco IOS Service disruption in (DoS) Vulnerability made into a state

Trust: 0.8

sources: JVNDB: JVNDB-2013-002629

DESCRIPTION

The crypto engine process in Cisco IOS on Aggregation Services Router (ASR) Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service (route processor crash) by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193. Cisco IOS is the interconnected network operating system used on most Cisco system routers and network switches. Cisco IOS is prone to a local denial-of-service vulnerability. A local attacker can exploit this issue to crash the system, resulting in denial-of-service conditions. This issue is being tracked by Cisco bug ID CSCuc52193

Trust: 2.52

sources: NVD: CVE-2013-1136 // JVNDB: JVNDB-2013-002629 // CNVD: CNVD-2013-05401 // BID: 59825 // VULHUB: VHN-61138

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2013-05401

AFFECTED PRODUCTS

vendor:	cisco	model:	ios	scope:	eq	version:	-	Trust: 1.6
vendor:	cisco	model:	aggregation services router route processor	scope:	eq	version:	2	Trust: 0.8
vendor:	cisco	model:	ios	scope:	lte	version:	15.3(1)t	Trust: 0.8
vendor:	cisco	model:	ios	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios 15.3 s	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios 15.3t	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 15.3s	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 15.3 t	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 15.3 s2	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 15.3 s1	scope:	-	version:	-	Trust: 0.3

sources: CNVD: CNVD-2013-05401 // BID: 59825 // JVNDB: JVNDB-2013-002629 // CNNVD: CNNVD-201305-229 // NVD: CVE-2013-1136

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-1136
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2013-1136
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2013-05401
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201305-229
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-61138
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2013-1136
severity:	MEDIUM
baseScore:	4.6
vectorString:	AV:L/AC:L/AU:S/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.1
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2013-05401
severity:	MEDIUM
baseScore:	4.6
vectorString:	AV:L/AC:L/AU:S/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.1
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-61138
severity:	MEDIUM
baseScore:	4.6
vectorString:	AV:L/AC:L/AU:S/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.1
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: CNVD: CNVD-2013-05401 // VULHUB: VHN-61138 // JVNDB: JVNDB-2013-002629 // CNNVD: CNNVD-201305-229 // NVD: CVE-2013-1136

PROBLEMTYPE DATA

problemtype:

CWE-399

Trust: 1.9

sources: VULHUB: VHN-61138 // JVNDB: JVNDB-2013-002629 // NVD: CVE-2013-1136

THREAT TYPE

local

Trust: 0.9

sources: BID: 59825 // CNNVD: CNNVD-201305-229

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201305-229

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-002629

PATCH

title:	Cisco Unified MeetingPlace Server Cross-Site Request Forgery Vulnerability	url:	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1136	Trust: 0.8
title:	29287	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=29287	Trust: 0.8
title:	Cisco IOS Aggregation Services Router Processor denial of service vulnerability patch	url:	https://www.cnvd.org.cn/patchInfo/show/34006	Trust: 0.6
title:	Cisco IOS Remediation of resource management error vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=186284	Trust: 0.6

sources: CNVD: CNVD-2013-05401 // JVNDB: JVNDB-2013-002629 // CNNVD: CNNVD-201305-229

EXTERNAL IDS

db:	NVD	id:	CVE-2013-1136	Trust: 3.4
db:	BID	id:	59825	Trust: 1.0
db:	JVNDB	id:	JVNDB-2013-002629	Trust: 0.8
db:	CNNVD	id:	CNNVD-201305-229	Trust: 0.7
db:	CNVD	id:	CNVD-2013-05401	Trust: 0.6
db:	CISCO	id:	20130510 CISCO ISR ROUTE PROCESSOR 2 DYNAMIC MULTIPOINT VIRTUAL PRIVATE NETWORK VULNERABILITY	Trust: 0.6
db:	VULHUB	id:	VHN-61138	Trust: 0.1

sources: CNVD: CNVD-2013-05401 // VULHUB: VHN-61138 // BID: 59825 // JVNDB: JVNDB-2013-002629 // CNNVD: CNNVD-201305-229 // NVD: CVE-2013-1136

REFERENCES

url:	http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2013-1136	Trust: 2.6
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-1136	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-1136	Trust: 0.8
url:	http://www.cisco.com	Trust: 0.3

sources: CNVD: CNVD-2013-05401 // VULHUB: VHN-61138 // BID: 59825 // JVNDB: JVNDB-2013-002629 // CNNVD: CNNVD-201305-229 // NVD: CVE-2013-1136

CREDITS

Cisco

Trust: 0.3

sources: BID: 59825

SOURCES

db:	CNVD	id:	CNVD-2013-05401
db:	VULHUB	id:	VHN-61138
db:	BID	id:	59825
db:	JVNDB	id:	JVNDB-2013-002629
db:	CNNVD	id:	CNNVD-201305-229
db:	NVD	id:	CVE-2013-1136

LAST UPDATE DATE

2025-04-11T23:15:26.383000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2013-05401	date:	2013-05-16T00:00:00
db:	VULHUB	id:	VHN-61138	date:	2013-05-13T00:00:00
db:	BID	id:	59825	date:	2013-05-10T00:00:00
db:	JVNDB	id:	JVNDB-2013-002629	date:	2013-05-14T00:00:00
db:	CNNVD	id:	CNNVD-201305-229	date:	2022-03-21T00:00:00
db:	NVD	id:	CVE-2013-1136	date:	2025-04-11T00:51:21.963

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2013-05401	date:	2013-05-16T00:00:00
db:	VULHUB	id:	VHN-61138	date:	2013-05-13T00:00:00
db:	BID	id:	59825	date:	2013-05-10T00:00:00
db:	JVNDB	id:	JVNDB-2013-002629	date:	2013-05-14T00:00:00
db:	CNNVD	id:	CNNVD-201305-229	date:	2013-05-16T00:00:00
db:	NVD	id:	CVE-2013-1136	date:	2013-05-13T11:50:48.467