PT-2014-5227 · Cisco · Cisco Ios Xr

Publicado 2014-08-25 · Atualizado 2017-08-29 · CVE-2014-3335

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:A/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.2 and earlier

Description The issue is related to improper NetFlow sampling of packets with multicast destination MAC addresses, which can cause a denial of service. This can be exploited by an unauthenticated, adjacent attacker who sends a crafted packet to an affected device with NetFlow sampling configured, leading to a lockup and eventual reload of a Network Processor chip and a line card processing traffic. The attacker must have access to the same broadcast or collision domain of the targeted device and may need additional knowledge about the device, such as whether NetFlow sampling is configured.

Recommendations For Cisco IOS XR versions 4.3.2 and earlier, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice. As a temporary workaround, consider disabling NetFlow sampling until a patch is available. Restrict access to the device to minimize the risk of exploitation, especially from adjacent attackers.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-3335

Produtos afetados

Cisco Ios Xr

Referências · 8

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140825-CVE-2014-3335 · Nota
• http://securityfocus.com/bid/69383 · Nota
• http://secunia.com/advisories/60222 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/95443 · Nota
• http://securitytracker.com/id/1030757 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3335 · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewAlert.x?alertId=35416 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-3335 · Nota de Segurança