Cisco IOS Software NAT DNS漏洞

CVECAN ID: CVE-2014-2111 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS 15.1-15.4版本内的应用层网关ALG模块存在安全漏洞，未经身份验证的远程攻击者利用此漏洞可造成受影响设备重载，导致拒绝服务（内存耗尽）。 0 Cisco IOS 15.1-15.4 Cisco已经为此发布了一个安全公告（cisco-sa-20140326-nat）以及相应补丁:...

CVE-2014-2111

The CVE-2014-2111 issue affects Cisco IOS (ALG module) NAT handling. When NAT is used, crafted DNS packets can cause remote, unauthenticated attackers to trigger a device reload, resulting in DoS. Affected Cisco IOS versions span 12.2–12.4 and 15.0–15.4. The vulnerability arises from how certain ...