[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2014-3335Date: (C)2014-08-27   (M)2023-12-22


Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet, aka Bug ID CSCup77750.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.6
Exploit Score: 3.2
Impact Score: 6.9
 
CVSS V2 Metrics:
Access Vector: ADJACENT_NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: COMPLETE
  
Reference:
SECTRACK-1030757
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3335
SECUNIA-60222
BID-69383
ciscoios-cve20143335-dos(95443)
http://tools.cisco.com/security/center/viewAlert.x?alertId=35416

CPE    10
cpe:/h:cisco:asr_9006:-
cpe:/h:cisco:asr_9000_rsp440_router:-
cpe:/h:cisco:asr_9001:-
cpe:/h:cisco:asr_9010:-
...
CWE    1
CWE-20

© SecPod Technologies