Cisco IOS Software TCP输入漏洞

CVECAN ID: CVE-2014-2109 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS 15.1-15.4版本内的TCP输入模块存在安全漏洞，未经身份验证的远程攻击者利用此漏洞可造成受影响设备重载，导致拒绝服务（内存耗尽）。 0 Cisco IOS 15.1-15.4 Cisco已经为此发布了一个安全公告（cisco-sa-20140326-nat）以及相应补丁:...

CVE-2014-2109

CVE-2014-2109 affects Cisco IOS NAT handling in the TCP Input module. The vulnerability, triggered by crafted TCP packets (when NAT is used), could cause memory exhaustion or device reload, resulting in DoS on affected Cisco IOS 12.2–12.4 and 15.0–15.4 releases. The issue is tied to the NAT proce...