Lucene search

CiscoCVE-2014-3359

HistorySep 25, 2014 - 10:55 a.m.

CVE-2014-3359

2014-09-2510:55:08

CWE-399

cisco

web.nvd.nist.gov

cisco

ios

memory leak

cve-2014-3359

denial of service

dhcpv6

vulnerability

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.7

Confidence

Low

EPSS

0.013

Percentile

85.8%

JSON

Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allows remote attackers to cause a denial of service (memory consumption or device reload) via malformed DHCPv6 packets, aka Bug ID CSCum90081.

Affected configurations

Nvd

Node

ciscoiosMatch15.1

ciscoiosMatch15.2

ciscoiosMatch15.3

ciscoiosMatch15.4

ciscoios_xeMatch3.4.0s

ciscoios_xeMatch3.4.1s

ciscoios_xeMatch3.4.2s

ciscoios_xeMatch3.4.3s

ciscoios_xeMatch3.4.4s

ciscoios_xeMatch3.4.5s

ciscoios_xeMatch3.5.0s

ciscoios_xeMatch3.5.1s

ciscoios_xeMatch3.5.2s

ciscoios_xeMatch3.6s\(.0\)

ciscoios_xeMatch3.6s\(.1\)

ciscoios_xeMatch3.6s\(.2\)

ciscoios_xeMatch3.7\(0\)s

ciscoios_xeMatch3.7\(1\)as

ciscoios_xeMatch3.7\(2\)s

ciscoios_xeMatch3.7\(3\)s

ciscoios_xeMatch3.7\(4\)s

ciscoios_xeMatch3.7\(5\)s

ciscoios_xeMatch3.8.0s

ciscoios_xeMatch3.8s\(.0\)

ciscoios_xeMatch3.8s\(.1\)

ciscoios_xeMatch3.8s\(.2\)

ciscoios_xeMatch3.9s\(.0\)

ciscoios_xeMatch3.9s\(.1\)

ciscoios_xeMatch3.9s\(.2\)

ciscoios_xeMatch3.10

ciscoios_xeMatch3.10.0s

ciscoios_xeMatch3.11.0s

ciscoios_xeMatch3.11.1s

ciscoios_xeMatch3.11.2s

VendorProductVersionCPE
ciscoios15.1cpe:2.3:o:cisco:ios:15.1:*:*:*:*:*:*:*
ciscoios15.2cpe:2.3:o:cisco:ios:15.2:*:*:*:*:*:*:*
ciscoios15.3cpe:2.3:o:cisco:ios:15.3:*:*:*:*:*:*:*
ciscoios15.4cpe:2.3:o:cisco:ios:15.4:*:*:*:*:*:*:*
ciscoios_xe3.4.0scpe:2.3:o:cisco:ios_xe:3.4.0s:*:*:*:*:*:*:*
ciscoios_xe3.4.1scpe:2.3:o:cisco:ios_xe:3.4.1s:*:*:*:*:*:*:*
ciscoios_xe3.4.2scpe:2.3:o:cisco:ios_xe:3.4.2s:*:*:*:*:*:*:*
ciscoios_xe3.4.3scpe:2.3:o:cisco:ios_xe:3.4.3s:*:*:*:*:*:*:*
ciscoios_xe3.4.4scpe:2.3:o:cisco:ios_xe:3.4.4s:*:*:*:*:*:*:*
ciscoios_xe3.4.5scpe:2.3:o:cisco:ios_xe:3.4.5s:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	15.1	cpe:2.3:o:cisco:ios:15.1:::::::*
cisco	ios	15.2	cpe:2.3:o:cisco:ios:15.2:::::::*
cisco	ios	15.3	cpe:2.3:o:cisco:ios:15.3:::::::*
cisco	ios	15.4	cpe:2.3:o:cisco:ios:15.4:::::::*
cisco	ios_xe	3.4.0s	cpe:2.3:o:cisco:ios_xe:3.4.0s:::::::*
cisco	ios_xe	3.4.1s	cpe:2.3:o:cisco:ios_xe:3.4.1s:::::::*
cisco	ios_xe	3.4.2s	cpe:2.3:o:cisco:ios_xe:3.4.2s:::::::*
cisco	ios_xe	3.4.3s	cpe:2.3:o:cisco:ios_xe:3.4.3s:::::::*
cisco	ios_xe	3.4.4s	cpe:2.3:o:cisco:ios_xe:3.4.4s:::::::*
cisco	ios_xe	3.4.5s	cpe:2.3:o:cisco:ios_xe:3.4.5s:::::::*