Sign-up

ID

VAR-201311-0294


CVE

CVE-2013-5553


TITLE

Cisco IOS Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2013-005050

DESCRIPTION

Multiple memory leaks in Cisco IOS 15.1 before 15.1(4)M7 allow remote attackers to cause a denial of service (memory consumption or device reload) by sending a crafted SIP message over (1) IPv4 or (2) IPv6, aka Bug IDs CSCuc42558 and CSCug25383. Cisco IOS is the interconnected network operating system used on most Cisco system routers and network switches. The vulnerability is due to improper handling of specially crafted SIP messages. Cisco IOS is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected system to reload, resulting in a denial-of-service condition. This issue is being tracked by Cisco Bug ID CSCuc42558. The following releases are affected: Cisco IOS 15.1(4)GC, 15.1(4)GC1, 15.1(4)M4, 15.1(4)M5, 15.1(4)M6

Trust: 2.52

sources: NVD: CVE-2013-5553 // JVNDB: JVNDB-2013-005050 // CNVD: CNVD-2013-14350 // BID: 63553 // VULHUB: VHN-65555

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2013-14350

AFFECTED PRODUCTS

vendor:ciscomodel:iosscope:eqversion:15.1

Trust: 1.6

vendor:ciscomodel:ios 15.1 m4scope: - version: -

Trust: 0.9

vendor:ciscomodel:iosscope:eqversion:15.1(4)gc

Trust: 0.8

vendor:ciscomodel:iosscope:eqversion:15.1(4)gc1

Trust: 0.8

vendor:ciscomodel:iosscope:eqversion:15.1(4)m4

Trust: 0.8

vendor:ciscomodel:iosscope:eqversion:15.1(4)m5

Trust: 0.8

vendor:ciscomodel:iosscope:eqversion:15.1(4)m6

Trust: 0.8

vendor:ciscomodel:ios 15.1 gcscope: - version: -

Trust: 0.6

vendor:ciscomodel:ios 15.1 gc1scope: - version: -

Trust: 0.6

vendor:ciscomodel:ios 15.1 m5scope: - version: -

Trust: 0.6

vendor:ciscomodel:ios 15.1 m6scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2013-14350 // BID: 63553 // JVNDB: JVNDB-2013-005050 // CNNVD: CNNVD-201311-097 // NVD: CVE-2013-5553

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2013-5553
value: HIGH

Trust: 1.0

NVD: CVE-2013-5553
value: HIGH

Trust: 0.8

CNVD: CNVD-2013-14350
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201311-097
value: HIGH

Trust: 0.6

VULHUB: VHN-65555
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2013-5553
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2013-14350
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-65555
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CNVD: CNVD-2013-14350 // VULHUB: VHN-65555 // JVNDB: JVNDB-2013-005050 // CNNVD: CNNVD-201311-097 // NVD: CVE-2013-5553

PROBLEMTYPE DATA

problemtype:CWE-399

Trust: 1.9

sources: VULHUB: VHN-65555 // JVNDB: JVNDB-2013-005050 // NVD: CVE-2013-5553

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201311-097

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201311-097

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2013-005050

PATCH
title:31516url:http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=31516
Trust: 0.8
title:cisco-sa-20131106-sipurl:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20131106-sip
Trust: 0.8
title:31562url:http://tools.cisco.com/security/center/viewAlert.x?alertId=31562
Trust: 0.8
title:cisco-sa-20131106-sipurl:http://www.cisco.com/cisco/web/support/JP/112/1120/1120849_cisco-sa-20131106-sip-j.html
Trust: 0.8
title:Patch for Cisco IOS SIP Remote Denial of Service Vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/40983
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2013-14350 // 
            
            
            
            JVNDB: JVNDB-2013-005050

EXTERNAL IDS
db:NVDid:CVE-2013-5553
Trust: 3.4
db:BIDid:63553
Trust: 1.6
db:JVNDBid:JVNDB-2013-005050
Trust: 0.8
db:CNNVDid:CNNVD-201311-097
Trust: 0.7
db:CNVDid:CNVD-2013-14350
Trust: 0.6
db:NSFOCUSid:25242
Trust: 0.6
db:CISCOid:20131106 CISCO IOS SOFTWARE SESSION INITIATION PROTOCOL DENIAL OF SERVICE VULNERABILITY
Trust: 0.6
db:VULHUBid:VHN-65555
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2013-14350 // 
            
            
            
            VULHUB: VHN-65555 // 
            
            
            
            BID: 63553 // 
            
            
            
            JVNDB: JVNDB-2013-005050 // 
            
            
            
            CNNVD: CNNVD-201311-097 // 
            
            
            
            NVD: CVE-2013-5553

REFERENCES
url:http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20131106-sip
Trust: 2.3
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-5553
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-5553
Trust: 0.8
url:http://tools.cisco.com/security/center/viewalert.x?alertid=31562
Trust: 0.6
url:http://www.securityfocus.com/bid/63553
Trust: 0.6
url:http://www.nsfocus.net/vulndb/25242
Trust: 0.6
url:http://www.cisco.com/
Trust: 0.3
url:http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20131106-sip#@id
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2013-14350 // 
            
            
            
            VULHUB: VHN-65555 // 
            
            
            
            BID: 63553 // 
            
            
            
            JVNDB: JVNDB-2013-005050 // 
            
            
            
            CNNVD: CNNVD-201311-097 // 
            
            
            
            NVD: CVE-2013-5553

CREDITS
Cisco
Trust: 0.9
sources:
            
            
            BID: 63553 // 
            
            
            
            CNNVD: CNNVD-201311-097

SOURCES
db:CNVDid:CNVD-2013-14350
db:VULHUBid:VHN-65555
db:BIDid:63553
db:JVNDBid:JVNDB-2013-005050
db:CNNVDid:CNNVD-201311-097
db:NVDid:CVE-2013-5553

LAST UPDATE DATE
2025-04-11T23:04:03.734000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2013-14350date:2013-11-11T00:00:00
db:VULHUBid:VHN-65555date:2013-11-08T00:00:00
db:BIDid:63553date:2013-11-06T00:00:00
db:JVNDBid:JVNDB-2013-005050date:2013-11-11T00:00:00
db:CNNVDid:CNNVD-201311-097date:2013-11-08T00:00:00
db:NVDid:CVE-2013-5553date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:CNVDid:CNVD-2013-14350date:2013-11-11T00:00:00
db:VULHUBid:VHN-65555date:2013-11-08T00:00:00
db:BIDid:63553date:2013-11-06T00:00:00
db:JVNDBid:JVNDB-2013-005050date:2013-11-11T00:00:00
db:CNNVDid:CNNVD-201311-097date:2013-11-08T00:00:00
db:NVDid:CVE-2013-5553date:2013-11-08T04:47:23.010