CVE-2014-3321

Опубликовано: 18 июл. 2014

Источник: nvd

CVSS2: 5.7

EPSS Низкий

Описание

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a series of crafted MPLS packets, aka Bug ID CSCuo91149.

Ссылки

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3321
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34936
Vendor Advisory
http://www.securitytracker.com/id/1030597
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3321
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34936
Vendor Advisory
http://www.securitytracker.com/id/1030597
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*

Версия до 4.3.4 (включая)

cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:4.3.1:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:4.3.2:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:asr_9000_rsp440_router:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9001:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9006:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9010:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9904:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9912:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_9922:-:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00443

Низкий

5.7 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-w963-wfhc-pqh3

github

больше 3 лет назад