CVE:CVE-2013-4806
CNNVD:CNNVD-201308-157
HP JD9##A、3COM、H3C等都是美国惠普（HP）公司的路由器和交换机产品。
多款HP路由器和交换机中的OSPF路由协议实现中存在安全漏洞，该漏洞源于在Link State Advertisement (LSA)数据库上执行操作之前，Link State ID值应为唯一LSA查询标识符，但是该程序允许LSA数据包中出现重复的Link State ID值。远程经过授权的攻击者可通过特制的LSA数据包利用该漏洞造成拒绝服务（路由器中断）或获得敏感的数据包信息。以下产品受到影响：HP JD9##A 路由器，HP J4###A，J484#B，J8###A，JD3##A，JE###A，JF55#A交换机，HP 3COM路由器和交换机，HP H3C路由器和交换机。
solution:Upgrade hp 3com_router to a higher version than 3012,3018,5012,5232,5642,5642_taa,5682,and avoid the version 3012,3018,5012,5232,5642,5642_taa,5682; Upgrade hp 5500-24g-4sfp_hi_switch_with_2_interface_slots to a higher version than jg311a,and avoid the version jg311a; Upgrade hp 5500-24g-poe_ei_switch to a higher version than jd378a,and avoid the version jd378a; Upgrade hp 5500-24g-poe_si_switch to a higher version than jd371a,and avoid the version jd371a; Upgrade hp 5500-24g-sfp_dc_ei_switch to a higher version than jd379a,and avoid the version jd379a; Upgrade hp 5500-24g-sfp_ei_switch to a higher version than jd374a,and avoid the version jd374a; Upgrade hp 5500-24g_dc_ei_switch to a higher version than jd373a,and avoid the version jd373a; Upgrade hp 5500-24g_ei_switch to a higher version than jd377a,and avoid the version jd377a; Upgrade hp 5500-24g_si_switch to a higher version than jd369a,and avoid the version jd369a; Upgrade hp 5500-48g-poe_ei_switch to a higher version than jd376a,and avoid the version jd376a; Upgrade hp 5500-48g-poe_si_switch to a higher version than jd372a,and avoid the version jd372a; Upgrade hp 5500-48g_ei_switch to a higher version than jd375a,and avoid the version jd375a; Upgrade hp 5500-48g_si_switch to a higher version than jd370a,and avoid the version jd370a; Upgrade hp 5500g-24_ei_10/100/1000_no_power_supply_unit_switch to a higher version than jf551a,and avoid the version jf551a; Upgrade hp 5500g-24_ei_sfp_no_power_supply_unit_switch to a higher version than jf553a,and avoid the version jf553a; Upgrade hp 5500g-48_ei_10/100/1000_no_power_supply_unit_switch to a higher version than jf552a,and avoid the version jf552a; Upgrade hp h3c_ethernet_switch to a higher version than s5600-26c,s5600-26c-pwr,s5600-26f,s5600-50c,s5600-50c-pwr,and avoid the version s5600-26c,s5600-26c-pwr,s5600-26f,s5600-50c,s5600-50c-pwr