CVE-2014-3308

N/A

Description

Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka Bug ID CSCun83985.

CVE Details

CVSS v3.1 ScoreN/A

Published7/7/2014

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

cisco:asr_9000_rsp440_routercisco:asr_9001cisco:asr_9006cisco:asr_9010cisco:asr_9904cisco:asr_9912cisco:asr_9922cisco:ios_xr

Weaknesses (CWE)

CWE-20

References

http://secunia.com/advisories/58869(psirt@cisco.com)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3308(psirt@cisco.com)

http://tools.cisco.com/security/center/viewAlert.x?alertId=34843(psirt@cisco.com)

http://www.securityfocus.com/bid/68351(psirt@cisco.com)

http://www.securitytracker.com/id/1030525(psirt@cisco.com)

http://secunia.com/advisories/58869(af854a3a-2127-422b-91ae-364da2661108)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3308(af854a3a-2127-422b-91ae-364da2661108)

http://tools.cisco.com/security/center/viewAlert.x?alertId=34843(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/68351(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1030525(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.