Lucene search
HistoryOct 10, 2014 - 10:55 a.m.
CVE-2014-3386
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.4
Confidence
High
EPSS
0.002
Percentile
56.2%
The GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8.4 before 8.4(7.15), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted series of GTP packets, aka Bug ID CSCum56399.
Affected configurations
Node
ciscoasaMatch8.2.5
ORciscoasaMatch8.2.5.13
ORciscoasaMatch8.2.5.22
ORciscoasaMatch8.2.5.26
ORciscoasaMatch8.2.5.33
ORciscoasaMatch8.2.5.41
ORciscoasaMatch8.2.5.46
ORciscoasaMatch8.2.5.48
ORciscoasaMatch8.2.5.49
ORciscoasaMatch8.4
ORciscoasaMatch8.4.1
ORciscoasaMatch8.4.2
ORciscoasaMatch8.4.3
ORciscoasaMatch8.4.4
ORciscoasaMatch8.4.5
ORciscoasaMatch8.4.6
ORciscoasaMatch8.4.7
ORciscoasaMatch8.7
ORciscoasaMatch9.0
ORciscoasaMatch9.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | asa | 8.2.5 | cpe:2.3:a:cisco:asa:8.2.5:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.13 | cpe:2.3:a:cisco:asa:8.2.5.13:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.22 | cpe:2.3:a:cisco:asa:8.2.5.22:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.26 | cpe:2.3:a:cisco:asa:8.2.5.26:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.33 | cpe:2.3:a:cisco:asa:8.2.5.33:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.41 | cpe:2.3:a:cisco:asa:8.2.5.41:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.46 | cpe:2.3:a:cisco:asa:8.2.5.46:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.48 | cpe:2.3:a:cisco:asa:8.2.5.48:*:*:*:*:*:*:* |
| cisco | asa | 8.2.5.49 | cpe:2.3:a:cisco:asa:8.2.5.49:*:*:*:*:*:*:* |
| cisco | asa | 8.4 | cpe:2.3:a:cisco:asa:8.4:*:*:*:*:*:*:* |
Related
openvas
openvas
prion
prion
Code injection
2014-10-10 10:55:00
cvelist
cvelist
CVE-2014-3386
2014-10-10 10:00:00
cve
cve
CVE-2014-3386
2014-10-10 10:55:06
securityvulns
securityvulns
Cisco ASA multiple security vulnerabilities
2015-07-14 00:00:00
Cisco ASA multiple DoS vulnerabilities
2014-10-13 00:00:00
nessus
nessus
Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20141008-asa)
2014-10-10 00:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco ASA Software
2014-10-08 16:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.4
Confidence
High
EPSS
0.002
Percentile
56.2%
Related for NVD:CVE-2014-3386