CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
Percentile
84.9%
The Cisco IOS Software implementation of the multicast Domain Name System (mDNS) feature contains the following vulnerabilities when processing mDNS packets that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition:
Cisco IOS Software mDNS Gateway Memory Leak Vulnerability
Cisco IOS Software mDNS Gateway Denial of Service Vulnerability
Cisco has released software updates that address these vulnerabilities. This advisory is available at the following link:
Note: The September 24, 2014, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. All advisories address vulnerabilities in Cisco IOS Software. Individual publication links are in Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep14.html[“http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep14.html”]
Vendor | Product | Version | CPE |
---|---|---|---|
cisco | ios | 15.1sy | cpe:2.3:o:cisco:ios:15.1sy:*:*:*:*:*:*:* |
cisco | ios | 15.4t | cpe:2.3:o:cisco:ios:15.4t:*:*:*:*:*:*:* |
cisco | ios | 15.2e | cpe:2.3:o:cisco:ios:15.2e:*:*:*:*:*:*:* |
cisco | ios | 15.4s | cpe:2.3:o:cisco:ios:15.4s:*:*:*:*:*:*:* |
cisco | cisco_ios | 3.3se | cpe:2.3:o:cisco:cisco_ios:3.3se:xe:*:*:*:*:*:* |
cisco | cisco_ios | 3.3xo | cpe:2.3:o:cisco:cisco_ios:3.3xo:xe:*:*:*:*:*:* |
cisco | cisco_ios | 3.5e | cpe:2.3:o:cisco:cisco_ios:3.5e:xe:*:*:*:*:*:* |
cisco | cisco_ios | 3.11s | cpe:2.3:o:cisco:cisco_ios:3.11s:xe:*:*:*:*:*:* |
cisco | ios | 15.1(2)sy | cpe:2.3:o:cisco:ios:15.1\(2\)sy:*:*:*:*:*:*:* |
cisco | ios | 15.1(2)sy1 | cpe:2.3:o:cisco:ios:15.1\(2\)sy1:*:*:*:*:*:*:* |