Lucene search

K
cve[email protected]CVE-2014-2111
HistoryMar 27, 2014 - 9:55 p.m.

CVE-2014-2111

2014-03-2721:55:09
CWE-20
web.nvd.nist.gov
28
cisco
ios
alg
module
remote attackers
denial of service
dns
vulnerability
cve-2014-2111
nvd

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%

The Application Layer Gateway (ALG) module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted DNS packets, aka Bug ID CSCue00996.

Affected configurations

NVD
Node
ciscoiosMatch12.2
OR
ciscoiosMatch12.3
OR
ciscoiosMatch12.4
OR
ciscoiosMatch15.0
OR
ciscoiosMatch15.1
OR
ciscoiosMatch15.2
OR
ciscoiosMatch15.3
OR
ciscoiosMatch15.4

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

56.0%