CVEvulnerability
CVE-2014-3354
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-09-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCui11547.
Affected configurations
• cisco ios 12.0
• cisco ios 12.2
• cisco ios 12.4
• cisco ios 15.0
• cisco ios 15.1
• cisco ios 15.2
• cisco ios 15.3
• cisco ios xe 2.1
• cisco ios xe 2.1.0
• cisco ios xe 2.1.1
• cisco ios xe 2.1.2
• cisco ios xe 2.2
• cisco ios xe 2.2.1
• cisco ios xe 2.2.2
• cisco ios xe 2.2.3
• cisco ios xe 2.3
• cisco ios xe 2.3.0
• cisco ios xe 2.3.1
• cisco ios xe 2.3.1t
• cisco ios xe 2.3.2
• cisco ios xe 2.4
• cisco ios xe 2.4.0
• cisco ios xe 2.4.1
• cisco ios xe 2.4.2
• cisco ios xe 2.4.3
• cisco ios xe 2.4.4
• cisco ios xe 2.5\(.0\)
• cisco ios xe 2.5.0
• cisco ios xe 2.5.1
• cisco ios xe 2.5.2
• cisco ios xe 2.6\(.0\)
• cisco ios xe 2.6\(.1\)
• cisco ios xe 2.6\(.2\)
• cisco ios xe 2.6.0
• cisco ios xe 2.6.1
• cisco ios xe 2.6.2
• cisco ios xe 3.1.0s
• cisco ios xe 3.1.0sg
• cisco ios xe 3.1.1s
• cisco ios xe 3.1.1sg
• cisco ios xe 3.1.2s
• cisco ios xe 3.1.3s
• cisco ios xe 3.1.4s
• cisco ios xe 3.1s\(.0\)
• cisco ios xe 3.1s\(.1\)
• cisco ios xe 3.1s\(.2\)
• cisco ios xe 3.1s\(.3\)
• cisco ios xe 3.2.00.xo.15.0\(2\)xo
• cisco ios xe 3.2.0s
• cisco ios xe 3.2.0sg
• cisco ios xe 3.2.0xo
• cisco ios xe 3.2.1s
• cisco ios xe 3.2.1se
• cisco ios xe 3.2.1sg
• cisco ios xe 3.2.2s
• cisco ios xe 3.2.2se
• cisco ios xe 3.2.2sg
• cisco ios xe 3.2.3se
• cisco ios xe 3.2.3sg
• cisco ios xe 3.2.4sg
… and 71 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-rsvp Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-rsvp/cvrf/cisco-sa-20140924-rsvp_cvrf.xml tools.cisco.com
- http://www.securityfocus.com/bid/70131 www.securityfocus.com
- http://www.securityfocus.com/bid/70183 www.securityfocus.com
- http://www.securitytracker.com/id/1030893 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96178 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-rsvp Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-rsvp/cvrf/cisco-sa-20140924-rsvp_cvrf.xml tools.cisco.com
- http://www.securityfocus.com/bid/70131 www.securityfocus.com
- http://www.securityfocus.com/bid/70183 www.securityfocus.com
- http://www.securitytracker.com/id/1030893 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96178 exchange.xforce.ibmcloud.com