Lucene search
CiscoCVE-2014-3386HistoryOct 10, 2014 - 10:55 a.m.
CVE-2014-3386
2014-10-1010:55:06
CWE-399
cisco
web.nvd.nist.gov
20
cisco
asa software
gtp
inspection
denial of service
dos
vulnerability
cve-2014-3386
nvd
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
56.2%
The GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8.4 before 8.4(7.15), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted series of GTP packets, aka Bug ID CSCum56399.
Affected configurations
Node
ciscoasaMatch8.2.5
ORciscoasaMatch8.2.5.13
ORciscoasaMatch8.2.5.22
ORciscoasaMatch8.2.5.26
ORciscoasaMatch8.2.5.33
ORciscoasaMatch8.2.5.41
ORciscoasaMatch8.2.5.46
ORciscoasaMatch8.2.5.48
ORciscoasaMatch8.2.5.49
ORciscoasaMatch8.4
ORciscoasaMatch8.4.1
ORciscoasaMatch8.4.2
ORciscoasaMatch8.4.3
ORciscoasaMatch8.4.4
ORciscoasaMatch8.4.5
ORciscoasaMatch8.4.6
ORciscoasaMatch8.4.7
ORciscoasaMatch8.7
ORciscoasaMatch9.0
ORciscoasaMatch9.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | asa | 8.2.5 | cpe:2.3:a:cisco:asa:8.2.5:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.13 | cpe:2.3:a:cisco:asa:8.2.5.13:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.22 | cpe:2.3:a:cisco:asa:8.2.5.22:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.26 | cpe:2.3:a:cisco:asa:8.2.5.26:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.33 | cpe:2.3:a:cisco:asa:8.2.5.33:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.41 | cpe:2.3:a:cisco:asa:8.2.5.41:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.46 | cpe:2.3:a:cisco:asa:8.2.5.46:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.48 | cpe:2.3:a:cisco:asa:8.2.5.48:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.49 | cpe:2.3:a:cisco:asa:8.2.5.49:*:*:*:*:*:*:* |
| cisco | asa | 8.4 | cpe:2.3:a:cisco:asa:8.4:*:*:*:*:*:*:* |
Related
openvas
openvas
nvd
nvd
CVE-2014-3386
2014-10-10 10:55:06
prion
prion
Code injection
2014-10-10 10:55:00
cvelist
cvelist
CVE-2014-3386
2014-10-10 10:00:00
securityvulns
securityvulns
Cisco ASA multiple security vulnerabilities
2015-07-14 00:00:00
Cisco ASA multiple DoS vulnerabilities
2014-10-13 00:00:00
nessus
nessus
Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20141008-asa)
2014-10-10 00:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco ASA Software
2014-10-08 16:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.5
Confidence
Low
EPSS
0.002
Percentile
56.2%
Related for CVE-2014-3386