Lucene search

[email protected]NVD:CVE-2014-3356

HistorySep 25, 2014 - 10:55 a.m.

CVE-2014-3356

2014-09-2510:55:08

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

9.1

Confidence

High

EPSS

0.012

Percentile

85.1%

JSON

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCue22753.

Affected configurations

Nvd

Node

ciscoios_xeMatch3.3\(.0\)xo

ciscoios_xeMatch3.6.0s

ciscoios_xeMatch3.6.1s

ciscoios_xeMatch3.6.2s

ciscoios_xeMatch3.7\(0\)s

ciscoios_xeMatch3.7\(1\)as

ciscoios_xeMatch3.7\(2\)s

ciscoios_xeMatch3.7\(3\)s

ciscoios_xeMatch3.7\(4\)s

ciscoios_xeMatch3.7\(5\)s

ciscoios_xeMatch3.8\(0\)s

ciscoios_xeMatch3.8\(1\)s

ciscoios_xeMatch3.8\(2\)s

ciscoios_xeMatch3.9\(0\)s

ciscoios_xeMatch3.9\(1a\)s

ciscoios_xeMatch3.9\(2\)s

ciscoios_xeMatch3.10s

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-metadata

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-metadata/cvrf/cisco-sa-20140924-metadata_cvrf.xml

www.securityfocus.com/bid/70135

www.securitytracker.com/id/1030894

exchange.xforce.ibmcloud.com/vulnerabilities/96176

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

9.1

Confidence

High

EPSS

0.012

Percentile

85.1%

JSON

Related for NVD:CVE-2014-3356

cvelist1 prion1 cve1 nessus3 cisco1 cloudfoundry1 securityvulns1 ics1