Vulnerability Details CVE-2014-3358
Memory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allows remote attackers to cause a denial of service (memory consumption, and interface queue wedge or device reload) via malformed mDNS packets, aka Bug ID CSCuj58950.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.7%
CVSS Severity
CVSS v2 Score 7.8
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns/cvrf/cisco-sa-20140924-mdns_cvrf.xml
- http://www.securityfocus.com/bid/70139
- http://www.securitytracker.com/id/1030898
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96183
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns/cvrf/cisco-sa-20140924-mdns_cvrf.xml
- http://www.securityfocus.com/bid/70139
- http://www.securitytracker.com/id/1030898
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96183
Products affected by CVE-2014-3358
-
cpe:2.3:o:cisco:ios:15.0
-
cpe:2.3:o:cisco:ios:15.1
-
cpe:2.3:o:cisco:ios:15.2
-
cpe:2.3:o:cisco:ios:15.4
-
cpe:2.3:o:cisco:ios_xe:3.11.0s
-
cpe:2.3:o:cisco:ios_xe:3.3(.0)xo
-
cpe:2.3:o:cisco:ios_xe:3.3.0se
-
cpe:2.3:o:cisco:ios_xe:3.3.1se
-
cpe:2.3:o:cisco:ios_xe:3.5.0e
-
cpe:2.3:o:cisco:ios_xe:3.5.1e