CVE:CVE-2013-2779
CNNVD:CNNVD-201304-193
Cisco IOS是美国思科（Cisco）公司为其网络设备开发的操作系统。
Cisco 1000系列Aggregation Services Routers（ASR）中的Cisco IOS XE 中存在拒绝服务漏洞。该漏洞源于程序没有正确地实现Cisco Multicast Leaf Recycle Elimination (MLRE)功能。通过分片的IPv6 MVPN（又名MVPNv6）数据包，远程攻击者可利用该漏洞造成拒绝服务（card重载）。Services Routers（ASR）中的Cisco IOS XE  3.4.5S之前的3.4版本，3.7.1S之前的3.5至3.7版本中存在此漏洞。
solution:Upgrade cisco ios_xe to a higher version than 3.4.0as,3.4.0s,3.4.1s,3.4.2s,3.4.3s,3.4.4s,3.4.xs,3.5.0s,3.5.1s,3.5.2s,3.5.xs,3.6.0s,3.6.1s,3.6.2s,3.7.0s,and avoid the version 3.4.0as,3.4.0s,3.4.1s,3.4.2s,3.4.3s,3.4.4s,3.4.xs,3.5.0s,3.5.1s,3.5.2s,3.5.xs,3.6.0s,3.6.1s,3.6.2s,3.7.0s; Upgrade cisco asr_1001 to a higher version than -; Upgrade cisco asr_1002 to a higher version than -; Upgrade cisco asr_1002-x to a higher version than -; Upgrade cisco asr_1002_fixed_router to a higher version than -; Upgrade cisco asr_1004 to a higher version than -; Upgrade cisco asr_1006 to a higher version than -; Upgrade cisco asr_1013 to a higher version than -; Upgrade cisco asr_1023_router to a higher version than -