CVE-2014-3262

Опубликовано: 16 мая 2014

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service (CEF outage and packet drops) via malformed messages, aka Bug ID CSCun73782.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3262
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34233
Vendor Advisory
http://www.securitytracker.com/id/1030243
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3262
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34233
Vendor Advisory
http://www.securitytracker.com/id/1030243
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*

Версия до 15.3\(3\)s (включая)

cpe:2.3:o:cisco:ios:15.3\(3\)m:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios:15.3m:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios:15.3s:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00643

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-mf7q-r36h-f2c2

github

больше 3 лет назад