CVE-2014-3388

2014-10-1010:55:06

CWE-399

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

56.2%

JSON

The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7), and 9.2 before 9.2(2) allows remote attackers to cause a denial of service (device reload) via crafted DNS packets, aka Bug ID CSCuo68327.

Affected configurations

Nvd

Node

ciscoasaMatch9.0

ciscoasaMatch9.1

ciscoasaMatch9.2

VendorProductVersionCPE
ciscoasa9.0cpe:2.3:a:cisco:asa:9.0:*:*:*:*:*:*:*
ciscoasa9.1cpe:2.3:a:cisco:asa:9.1:*:*:*:*:*:*:*
ciscoasa9.2cpe:2.3:a:cisco:asa:9.2:*:*:*:*:*:*:*