Lucene search

K
cve[email protected]CVE-2014-3335
HistoryAug 26, 2014 - 10:55 a.m.

CVE-2014-3335

2014-08-2610:55:00
CWE-20
web.nvd.nist.gov
18
cisco
ios xr
asr 9000
netflow
denial of service
vulnerability
cve-2014-3335
nvd

6.9 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:N/I:N/A:C

0.008 Low

EPSS

Percentile

81.5%

Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet, aka Bug ID CSCup77750.

6.9 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:H/Au:N/C:N/I:N/A:C

0.008 Low

EPSS

Percentile

81.5%

Related for CVE-2014-3335