CVE-2013-6704 - Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consumption) via TFTP (1) client or (2) server traffic, aka Bug IDs CSCuh09324 and CSCty42686

Back Back to CVE browser

HIGH

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consumption) via TFTP (1) client or (2) server traffic, aka Bug IDs CSCuh09324 and CSCty42686

Published Dec 3, 2013

7.1

HIGH

CVSS 2.0

EPSS 1.35%

Description

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service (memory consumption) via TFTP (1) client or (2) server traffic, aka Bug IDs CSCuh09324 and CSCty42686.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-399

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6704
vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securitytracker.com/id/1029424
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6704		vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securitytracker.com/id/1029424		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Dec 3, 2013

Updated Aug 6, 2024

Reserved Nov 7, 2013

Link CVE-2013-6704

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2013-6704

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-6704