CVE

Id
70652  
CVE No.
CVE-2014-3356  
Status
Candidate  
Description
The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCue22753.  
Phase
Assigned (20140507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
671660 70652 CVE-2014-3356 CONFIRM:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-metadata/cvrf/cisco-sa-20140924-metadata_cvrf.xml  View
671661 70652 CVE-2014-3356 CISCO:20140924 Cisco IOS Software Metadata Vulnerabilities  View
671662 70652 CVE-2014-3356 URL:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-metadata  View
671663 70652 CVE-2014-3356 BID:70135  View
671664 70652 CVE-2014-3356 URL:http://www.securityfocus.com/bid/70135  View
671665 70652 CVE-2014-3356 SECTRACK:1030894  View
671666 70652 CVE-2014-3356 URL:http://www.securitytracker.com/id/1030894  View
671667 70652 CVE-2014-3356 XF:ciscoios-cve20143356-dos(96176)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
18515 JVNDB-2014-007390 Cisco Prime Security Manager の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性 Cisco Prime Security Manager (別名 PRSM) の Web フレームワークには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-3364 70652 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007390.html  View