CVE:CVE-2013-1166
CNNVD:CNNVD-201304-185
Cisco IOS是美国思科（Cisco）公司为其网络设备开发的操作系统。
Cisco 1000系列Aggregation Services Routers（ASR）中的Cisco IOS XE存在拒绝服务漏洞。当启用了VRF-aware NAT和SIP ALG时，攻击者可以利用该漏洞通过发送大量的SIP数据包造成拒绝服务（card重载）。Cisco IOS XE 3.4.5S之前的3.2至3.4版本，以及3.7.1S之前的3.5至3.7版本中存在此漏洞。
solution:Upgrade cisco asr_1001 to a higher version than -; Upgrade cisco asr_1002 to a higher version than -; Upgrade cisco asr_1002-x to a higher version than -; Upgrade cisco asr_1002_fixed_router to a higher version than -; Upgrade cisco asr_1004 to a higher version than -; Upgrade cisco asr_1006 to a higher version than -; Upgrade cisco asr_1023_router to a higher version than -; Upgrade cisco ios_xe to a higher version than 3.2.0s,3.2.1s,3.2.2s,3.3.0s,3.3.1s,3.3.2s,3.4.0as,3.4.0s,3.4.1s,3.4.2s,3.4.3s,3.4.4s,3.7.0s,and avoid the version 3.2.0s,3.2.1s,3.2.2s,3.3.0s,3.3.1s,3.3.2s,3.4.0as,3.4.0s,3.4.1s,3.4.2s,3.4.3s,3.4.4s,3.7.0s