Cisco Wireless LAN Controller拒绝服务漏洞

Bugtraq ID:65977 CVE ID:CVE-2014-0701 Cisco Wireless LAN Controller负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller WebAuth功能存在安全漏洞，允许未验证远程攻击者使设备重载。 由于处理WebAuth登录过程中未能释放使用的内存，允许攻击者高速提交大量WebAuth请求，可使设备进行不稳定状态，消耗大量内存造成设备重启。 0 Cisco Wireless LAN Controller 7.0 Cisco Wireless LA...

CVE-2014-0701

Cisco WLCs are affected by CVE-2014-0701: memory not properly deallocated during WebAuth login handling, enabling remote attackers to cause a DoS reboot by sending WebAuth requests at high rate. Affected versions include 7.0 before 7.0.250.0, 7.2, 7.3, and 7.4 before 7.4.110.0. The issue is tied ...