PT-2014-5216 · Cisco · Cisco Ios Xr

Publicado 2014-07-23 · Atualizado 2017-01-12 · CVE-2014-3322

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.2 and earlier

Description The issue is related to improper NetFlow sampling of IP packets, which can be exploited by sending malformed IPv4 or IPv6 packets to cause a denial of service, resulting in chip and card hangs. This can lead to a lockup and eventual reload of a Network Processor chip and a line card, causing a denial of service condition. The vulnerability can be exploited by an unauthenticated, adjacent attacker who is on the same broadcast or collision domain as the targeted device. NetFlow sampling must be configured on the targeted device for the exploit to be successful.

Recommendations For Cisco IOS XR versions 4.3.2 and earlier, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice. As a temporary workaround, consider disabling NetFlow sampling until a patch is available. Restrict access to the device to minimize the risk of exploitation, ensuring that only trusted devices are on the same broadcast or collision domain.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-3322

Produtos afetados

Cisco Ios Xr

Referências · 7

• http://tools.cisco.com/security/center/viewAlert.x?alertId=35009 · Aviso do Fabricante
• http://secunia.com/advisories/60311 · Nota
• http://securityfocus.com/bid/68833 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3322 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140723-CVE-2014-3322 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3322 · Nota de Segurança
• http://securitytracker.com/id/1030623 · Nota