CVE-2013-6981

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-28 · updated 2026-06-17
Weakness: CWE-20

Description

Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packets, aka Bug ID CSCul00709.

Affected products

Cisco IOS XE: through 3.7s\(.1\); 2.5(.0), 2.6(.0), 2.6(.1), 2.6(.2), 3.1s(.0), 3.1s(.1) (+22)

References

http://osvdb.org/101423
http://secunia.com/advisories/56206
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6981
http://tools.cisco.com/security/center/viewAlert.x?alertId=32281
http://www.securityfocus.com/bid/64514
http://www.securitytracker.com/id/1029538
http://osvdb.org/101423
http://secunia.com/advisories/56206
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6981
http://tools.cisco.com/security/center/viewAlert.x?alertId=32281
http://www.securityfocus.com/bid/64514
http://www.securitytracker.com/id/1029538

Get alerted when CVE-2013-6981 or the next vulnerability affects your stack