Cisco Cisco IOS Software Release 12.2(27)SBC

OSPFv3 is not affected by this vulnerability. Fabric Shortest Path First (FSPF) protocol is not 
affected by this vulnerability.

Cisco has released free software updates that address this vulnerability.

Workaround: Workarounds that mitigate this vulnerability are available. This advisory is available 
at the following link:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130801-lsaospf

PSIRT Evaluation: The Cisco PSIRT has assigned this bug the following CVSS version 2 score. The 
Base and Temporal CVSS scores as of the time of evaluation are 5.8/5.8:

CVE ID CVE-2013-0149 has been assigned to document this issue. 

http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html

CSCty42892

Symptoms: High CPU is experienced, caused by PPPoE session churn.

Conditions:

router#sh processes cpu sorted

CPU utilization for five seconds: 91%/13%; one minute: 85%; five minutes:

82%

 PID Runtime(ms)   Invoked      uSecs   5Sec   1Min   5Min TTY Process

 382       42136      3099      13596 26.71%  9.04%  6.16%   5 Virtual Exec

 181   167143080 185108104        902 12.07% 12.95% 12.98%   0 SSM

connection m 

 353    97467076  25441365       3831  8.39%  9.65%  9.81%   0 VTEMPLATE

Backgr 

 242   580521844  12914275      44952  5.67%  6.70%  6.58%   0

c10k_periodic_st 

 324   162851700   4632273      35156  3.75%  1.39%  1.42%   0 MFI LFD Stats

Pr 

 237   127724132  13724836       9306  3.51%  0.85%  1.17%   0 Collection

proce 

router#sh pppoe summary

    PTA  : Locally terminated sessions

    FWDED: Forwarded sessions

    TRANS: All other sessions (in transient state)

                                TOTAL     PTA   FWDED   TRANS

TOTAL                           18299   18184       4     111

ATM1/0/0                         1086    1082       0       4

ATM1/0/2                          265     262       0       3

ATM1/0/3                          591     583       0       8

ATM2/0/0                          473     472       0       1

ATM2/0/1                         1204    1200       0       4

GigabitEthernet3/1/0             3548    3532       0      16

GigabitEthernet3/1/1             3875    3852       2      21

GigabitEthernet5/1/0             3045    3021       0      24

GigabitEthernet5/1/1             3301    3273       0      28

iadsl-mch-uruapan-9#