Unscored CVE-2013-6704 EUVD-2013-6506GHSA-42g2-v9pm-6w57

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consump…

Published Dec 3, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consumption) via TFTP (1) client or (2) server traffic, aka Bug IDs CSCuh09324 and CSCty42686.

References

1029424 vdb-entry
20131203 Cisco IOS XE Software TFTP Denial of Service Vulnerability vendor-advisory