CVE-2014-3276

Опубликовано: 26 мая 2014

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins, aka Bug ID CSCuo56780.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3276
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34329
Vendor Advisory
http://www.securitytracker.com/id/1030274
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3276
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34329
Vendor Advisory
http://www.securitytracker.com/id/1030274
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:identity_services_engine_software:*:*:*:*:*:*:*:*

Версия до 1.2 (включая)

cpe:2.3:a:cisco:identity_services_engine_software:1.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:identity_services_engine_software:1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00585

Низкий

4 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-wg88-5525-mfh3

github

больше 3 лет назад