CVE-2014-2176

Опубликовано: 14 июн. 2014

Источник: nvd

CVSS2: 7.1

EPSS Низкий

Описание

Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service (NP chip and line card reload) via malformed IPv6 packets, aka Bug ID CSCun71928.

Ссылки

http://secunia.com/advisories/58722
Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140611-ipv6
Vendor Advisory
http://www.securityfocus.com/bid/68005
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030400
Third Party Advisory
VDB Entry
http://secunia.com/advisories/58722
Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140611-ipv6
Vendor Advisory
http://www.securityfocus.com/bid/68005
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030400
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:cisco:ios_xr:4.1.2:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:4.2.0:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:4.3.1:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:5.1.0:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:5.1.1:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00819

Низкий

7.1 High

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-3gmq-p7p4-9w39

github

больше 3 лет назад