CVEvulnerability
CVE-2014-3358
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-09-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-78
Description
Memory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allows remote attackers to cause a denial of service (memory consumption, and interface queue wedge or device reload) via malformed mDNS packets, aka Bug ID CSCuj58950.
Affected configurations
• cisco ios 15.0
• cisco ios 15.1
• cisco ios 15.2
• cisco ios 15.4
• cisco ios xe 3.3\(.0\)xo
• cisco ios xe 3.3.0se
• cisco ios xe 3.3.1se
• cisco ios xe 3.5.0e
• cisco ios xe 3.5.1e
• cisco ios xe 3.11.0s
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns/cvrf/cisco-sa-20140924-mdns_cvrf.xml tools.cisco.com
- http://www.securityfocus.com/bid/70139 www.securityfocus.com
- http://www.securitytracker.com/id/1030898 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96183 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns/cvrf/cisco-sa-20140924-mdns_cvrf.xml tools.cisco.com
- http://www.securityfocus.com/bid/70139 www.securityfocus.com
- http://www.securitytracker.com/id/1030898 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96183 exchange.xforce.ibmcloud.com