Cisco IOS XE Software Internet Key Exchange Version 2 (IKEv2) Denial of Service (cisco-sa-20140326-ikev2)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the Internet Key Exchange Version 2 IKEv2 module. An unauthenticated, remote attacker could potentially exploit this issue by sending a malformed IKEv...

Cisco IOS Software IK3v2模块拒绝服务漏洞

CVECAN ID: CVE-2014-2108 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS 12.2、15.0-15.3、IOS XE 3.2-3.7、3.8-3.10版本存在安全漏洞，远程攻击者通过特制的IKEv2数据包，利用此漏洞可造成拒绝服务（内存耗尽）。 0 Cisco IOS 15.x Cisco IOS 12.2 Cisco已经为此发布了一个安全公告（cisco-sa-20140326-ikev2）以及相应补丁:...

CVE-2014-2108

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

CVE-2014-2108

CVE-2014-2108 affects Cisco IOS/IOS XE: IOS 12.2 and 15.0–15.3, and IOS XE 3.2–3.7 before 3.7.5S and 3.8–3.10 before 3.10.1S are vulnerable. The root cause is how the Internet Key Exchange Version 2 (IKEv2) module processes certain malformed IKEv2 packets, enabling an unauthenticated remote attac...