OSPF Implementation Vulnerability in Extreme Networks EXOS
CVE-2013-7309

Currently unrated

Key Information:

Vendor: Extremenetworks
Status: Exos
Vendor: CVE Published:; 23 January 2014

🔔 Create Extremenetworks Vulnerability Alert

What is CVE-2013-7309?

The OSPF implementation within Extreme Networks EXOS has a flaw that does not adequately handle duplicate Link State ID values present in Link State Advertisement (LSA) packets. This oversight can be exploited by remote attackers, leading to the potential disruption of routing functions or the exposure of sensitive packet information through specially crafted LSA packets. This vulnerability raises significant concerns about the integrity and availability of network communications.

References

http://www.kb.cert.org/vuls/id/BLUU-985QSE

x_refsource_CONFIRM

http://www.kb.cert.org/vuls/id/229804

third-party-advisoryx_refsource_CERT-VN

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
Oct 3, 2022
Vulnerability published
Jan 23, 2014

CVE-2013-7309 Data

JSON