← Zuruck zu CVEs
CVE-2013-5385
N/ABeschreibung
The OSPF implementation in IBM i 6.1 and 7.1, in z/OS on zSeries servers, and in Networking Operating System (aka NOS, formerly BLADE Operating System) does not properly validate Link State Advertisement (LSA) type 1 packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.
CVE Details
CVSS v3.1 BewertungN/A
Veroffentlicht1/2/2014
Zuletzt geandert4/29/2026
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
ibm:iibm:z\/os
Schwachen (CWE)
CWE-20
Referenzen
http://www-01.ibm.com/support/docview.wss?uid=isg3T1019716(psirt@us.ibm.com)
http://www-01.ibm.com/support/docview.wss?uid=nas8N1010309(psirt@us.ibm.com)
http://www.kb.cert.org/vuls/id/229804(psirt@us.ibm.com)
http://www.kb.cert.org/vuls/id/BLUU-985QTG(psirt@us.ibm.com)
http://www-01.ibm.com/support/docview.wss?uid=isg3T1019716(af854a3a-2127-422b-91ae-364da2661108)
http://www-01.ibm.com/support/docview.wss?uid=nas8N1010309(af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/229804(af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/BLUU-985QTG(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.