medium4.6
CVE-2014-3335
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allo…
Impact
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet, aka Bug ID CSCup77750.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios Xr | through 4.3.2 Versions 4.3.0, 4.3.1 |
| Cisco | Asr 9000 Rsp440 Router | All versions |
| Cisco | Asr 9001 | All versions |
| Cisco | Asr 9006 | All versions |
| Cisco | Asr 9010 | All versions |
| Cisco | Asr 9904 | All versions |
| Cisco | Asr 9912 | All versions |
| Cisco | Asr 9922 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/60222
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3335
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35416
- http://www.securityfocus.com/bid/69383
- http://www.securitytracker.com/id/1030757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95443
- http://secunia.com/advisories/60222
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3335
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35416
- http://www.securityfocus.com/bid/69383
- http://www.securitytracker.com/id/1030757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95443