CVE-2013-7309

The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets…

published January 23, 2014

CVSS
—
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01229 · 68.7th percentile
Published
2014-01-23T17:00Z
EPSS history
Timeline
  • 23 JAN 17:00Z
    The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets…
    cvelistv5