Unscored CVE-2013-5469 EUVD-2013-5309GHSA-7rj5-64mx-9522

The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allow…

Published Aug 30, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service (flood of ACK packets) via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399.

References

1028969 vdb-entry
62083 vdb-entry
20130830 Cisco IOS Software TCP ACK Storm Vulnerability vendor-advisory
cisco-ios-cve20135469-dos(86794) vdb-entry
96764 vdb-entry