CVE-2014-3356

2014-09-2510:55:00

CWE-119

[email protected]

web.nvd.nist.gov

cisco

ios

ios xe

denial of service

cve-2014-3356

nvd

5.3 Medium

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.012 Low

EPSS

Percentile

84.9%

JSON

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCue22753.

CPENameOperatorVersion
cisco:ios_xecisco ios xeeq3.6.2s
cisco:ios_xecisco ios xeeq3.9\(2\)s
cisco:ios_xecisco ios xeeq3.7\(0\)s
cisco:ios_xecisco ios xeeq3.7\(2\)s
cisco:ios_xecisco ios xeeq3.9\(0\)s
cisco:ios_xecisco ios xeeq3.6.1s
cisco:ios_xecisco ios xeeq3.6.0s
cisco:ios_xecisco ios xeeq3.7\(4\)s
cisco:ios_xecisco ios xeeq3.7\(5\)s
cisco:ios_xecisco ios xeeq3.8\(1\)s

CPE	Name	Operator	Version
cisco:ios_xe	cisco ios xe	eq	3.6.2s
cisco:ios_xe	cisco ios xe	eq	3.9\(2\)s
cisco:ios_xe	cisco ios xe	eq	3.7\(0\)s
cisco:ios_xe	cisco ios xe	eq	3.7\(2\)s
cisco:ios_xe	cisco ios xe	eq	3.9\(0\)s
cisco:ios_xe	cisco ios xe	eq	3.6.1s
cisco:ios_xe	cisco ios xe	eq	3.6.0s
cisco:ios_xe	cisco ios xe	eq	3.7\(4\)s
cisco:ios_xe	cisco ios xe	eq	3.7\(5\)s
cisco:ios_xe	cisco ios xe	eq	3.8\(1\)s