CVE-2014-3356

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCue22753.

Score

CVSS 2.0 7.8 High

Status

Modified - psirt@cisco.com

Published

2014-09-25

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Ios Xe (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-metadata
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-metadata/cvrf/cisco-sa-20140924-…
• http://www.securityfocus.com/bid/70135
• http://www.securitytracker.com/id/1030894
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96176