CVE-2014-3276

Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins, aka Bug ID CSCuo56780.

Score

CVSS 2.0 4.0 Medium

Status

Modified - psirt@cisco.com

Published

2014-05-26

Last modified

2024-08-06

Weaknesses

CWE-399

Affected products

• Identity Services Engine Software (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3276
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34329
• http://www.securitytracker.com/id/1030274