Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-7311

The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service (routing disruption) or obtain sensitive packet information via a crafted LSA packet, a related issue to CVE-2013-0149.

Published

2014-01-23T17:55:05.477

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.4 (MEDIUM)

CVSSv2 Vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Access Vector: ADJACENT_NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

5.5

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	checkpoint	gaia_os	r75.0	Yes
Operating System	checkpoint	gaia_os	r76.0	Yes
Operating System	checkpoint	ipso_os	6.2	Yes

References

http://www.kb.cert.org/vuls/id/229804 US Government Resource ([email protected])
http://www.kb.cert.org/vuls/id/BLUU-985QRC US Government Resource ([email protected])
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94490 Vendor Advisory ([email protected])
http://www.kb.cert.org/vuls/id/229804 US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
http://www.kb.cert.org/vuls/id/BLUU-985QRC US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk94490 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)