CVE-2014-3308

Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka Bug ID CSCun83985.

Score

CVSS 2.0 6.4 Medium

Status

Modified - psirt@cisco.com

Published

2014-07-07

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Asr 9000 Rsp440 Router (Cisco)
• Asr 9001 (Cisco)
• Asr 9006 (Cisco)
• Asr 9010 (Cisco)
• Asr 9904 (Cisco)
• Asr 9912 (Cisco)
• Asr 9922 (Cisco)
• Ios Xr (Cisco)

References

• http://secunia.com/advisories/58869
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3308
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34843
• http://www.securityfocus.com/bid/68351
• http://www.securitytracker.com/id/1030525