Unscored CVE-2013-1136 EUVD-2013-1176GHSA-858m-2vf7-cgmq

The crypto engine process in Cisco IOS on Aggregation Services Router (ASR) Route Processor 2 does not properly manage memory, which allows…

Published May 13, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

The crypto engine process in Cisco IOS on Aggregation Services Router (ASR) Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service (route processor crash) by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193.

References

20130510 Cisco ASR Route Processor 2 Dynamic Multipoint Virtual Private Network Vulnerability vendor-advisory