var-201409-0402
Vulnerability from variot
Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet, aka Bug ID CSCuq10466. Cisco IOS is the interconnected network operating system used on most Cisco system routers and network switches. This issue is being tracked by Cisco Bug ID CSCuq10466
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201409-0402", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "ios xr", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "4.1.2" }, { "model": "ios xr", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "2.0" }, { "model": "ios xr", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "3.0" }, { "model": "ios xr", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "4.2.0" }, { "model": "ios xr", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "3.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "4.3.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "5.1.0" }, { "model": "ios xr", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "4.3.4" }, { "model": "ios xr", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "4.3.0" }, { "model": "ios xr", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "4.3.2" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.2.50" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.3" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.3.2" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "4.0.2" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.2.4" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.6.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "4.0.3" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.3.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.5.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "4.0.4" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "4.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.7.2" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.8.4" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.2" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.4.2" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.5.3" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.8.2" }, { "model": "network convergence system 6000", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.1.0" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.5.4" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.8.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.3.4" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.9.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.7" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "4.0.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.4" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.4.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.7.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.8.0" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.5" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.6.2" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.6.3" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.6" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.7.3" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.3.5" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.0.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.2.2" }, { "model": "network convergence system 6008", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": null }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.2.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.5.2" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "4.1.1" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.8.3" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.4.3" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.9.2" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.9.0" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "4.0.0" }, { "model": "ios xr", "scope": "eq", "trust": 1.0, "vendor": "cisco", "version": "3.3.3" }, { "model": "ios xr", "scope": "lte", "trust": 0.8, "vendor": "cisco", "version": "5.1" }, { "model": "network convergence system 6000 series router", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "network convergence system 6008 single chassis", "scope": null, "trust": 0.8, "vendor": "cisco", "version": null }, { "model": "ios xr", "scope": "lte", "trust": 0.6, "vendor": "cisco", "version": "\u003c=5.1" }, { "model": "ios xr software", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "0" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-06162" }, { "db": "BID", "id": "69960" }, { "db": "JVNDB", "id": "JVNDB-2014-004365" }, { "db": "CNNVD", "id": "CNNVD-201409-744" }, { "db": "NVD", "id": "CVE-2014-3379" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "cpe_match": [ { "cpe22Uri": "cpe:/o:cisco:ios_xr", "vulnerable": true }, { "cpe22Uri": "cpe:/h:cisco:network_convergence_system_6000", "vulnerable": true }, { "cpe22Uri": "cpe:/h:cisco:network_convergence_system_6008", "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "JVNDB", "id": "JVNDB-2014-004365" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco", "sources": [ { "db": "BID", "id": "69960" } ], "trust": 0.3 }, "cve": "CVE-2014-3379", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "author": "nvd@nist.gov", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "confidentialityImpact": "NONE", "exploitabilityScore": 6.5, "id": "CVE-2014-3379", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 1.8, "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "exploitabilityScore": 10.0, "id": "CNVD-2014-06162", "impactScore": 2.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "confidentialityImpact": "NONE", "exploitabilityScore": 6.5, "id": "VHN-71319", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "MEDIUM", "trust": 0.1, "vectorString": "AV:A/AC:L/AU:N/C:N/I:N/A:C", "version": "2.0" } ], "cvssV3": [], "severity": [ { "author": "nvd@nist.gov", "id": "CVE-2014-3379", "trust": 1.0, "value": "MEDIUM" }, { "author": "NVD", "id": "CVE-2014-3379", "trust": 0.8, "value": "Medium" }, { "author": "CNVD", "id": "CNVD-2014-06162", "trust": 0.6, "value": "MEDIUM" }, { "author": "CNNVD", "id": "CNNVD-201409-744", "trust": 0.6, "value": "MEDIUM" }, { "author": "VULHUB", "id": "VHN-71319", "trust": 0.1, "value": "MEDIUM" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-06162" }, { "db": "VULHUB", "id": "VHN-71319" }, { "db": "JVNDB", "id": "JVNDB-2014-004365" }, { "db": "CNNVD", "id": "CNNVD-201409-744" }, { "db": "NVD", "id": "CVE-2014-3379" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet, aka Bug ID CSCuq10466. Cisco IOS is the interconnected network operating system used on most Cisco system routers and network switches. \nThis issue is being tracked by Cisco Bug ID CSCuq10466", "sources": [ { "db": "NVD", "id": "CVE-2014-3379" }, { "db": "JVNDB", "id": "JVNDB-2014-004365" }, { "db": "CNVD", "id": "CNVD-2014-06162" }, { "db": "BID", "id": "69960" }, { "db": "VULHUB", "id": "VHN-71319" } ], "trust": 2.52 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2014-3379", "trust": 3.4 }, { "db": "BID", "id": "69960", "trust": 1.4 }, { "db": "SECTRACK", "id": "1030878", "trust": 1.1 }, { "db": "SECUNIA", "id": "61372", "trust": 1.1 }, { "db": "JVNDB", "id": "JVNDB-2014-004365", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201409-744", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2014-06162", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-71319", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-06162" }, { "db": "VULHUB", "id": "VHN-71319" }, { "db": "BID", "id": "69960" }, { "db": "JVNDB", "id": "JVNDB-2014-004365" }, { "db": "CNNVD", "id": "CNNVD-201409-744" }, { "db": "NVD", "id": "CVE-2014-3379" } ] }, "id": "VAR-201409-0402", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2014-06162" }, { "db": "VULHUB", "id": "VHN-71319" } ], "trust": 1.24750776 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-06162" } ] }, "last_update_date": "2024-11-23T22:13:39.878000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "Cisco IOS XR Software Malformed MPLS Packet Denial of Service Vulnerability", "trust": 0.8, "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3379" }, { "title": "35776", "trust": 0.8, "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=35776" }, { "title": "Patch for Cisco IOS XR Denial of Service Vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchInfo/show/50217" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-06162" }, { "db": "JVNDB", "id": "JVNDB-2014-004365" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-20", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-71319" }, { "db": "JVNDB", "id": "JVNDB-2014-004365" }, { "db": "NVD", "id": "CVE-2014-3379" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.6, "url": "http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2014-3379" }, { "trust": 1.7, "url": "http://tools.cisco.com/security/center/viewalert.x?alertid=35776" }, { "trust": 1.1, "url": "http://www.securityfocus.com/bid/69960" }, { "trust": 1.1, "url": "http://www.securitytracker.com/id/1030878" }, { "trust": 1.1, "url": "http://secunia.com/advisories/61372" }, { "trust": 1.1, "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/96068" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-3379" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-3379" }, { "trust": 0.3, "url": "http://www.cisco.com/" }, { "trust": 0.3, "url": "http://www.cisco.com/en/us/products/ps5845/index.html" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2014-06162" }, { "db": "VULHUB", "id": "VHN-71319" }, { "db": "BID", "id": "69960" }, { "db": "JVNDB", "id": "JVNDB-2014-004365" }, { "db": "CNNVD", "id": "CNNVD-201409-744" }, { "db": "NVD", "id": "CVE-2014-3379" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2014-06162" }, { "db": "VULHUB", "id": "VHN-71319" }, { "db": "BID", "id": "69960" }, { "db": "JVNDB", "id": "JVNDB-2014-004365" }, { "db": "CNNVD", "id": "CNNVD-201409-744" }, { "db": "NVD", "id": "CVE-2014-3379" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2014-09-23T00:00:00", "db": "CNVD", "id": "CNVD-2014-06162" }, { "date": "2014-09-20T00:00:00", "db": "VULHUB", "id": "VHN-71319" }, { "date": "2014-09-18T00:00:00", "db": "BID", "id": "69960" }, { "date": "2014-09-24T00:00:00", "db": "JVNDB", "id": "JVNDB-2014-004365" }, { "date": "2014-09-22T00:00:00", "db": "CNNVD", "id": "CNNVD-201409-744" }, { "date": "2014-09-20T10:55:05.027000", "db": "NVD", "id": "CVE-2014-3379" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2014-09-23T00:00:00", "db": "CNVD", "id": "CNVD-2014-06162" }, { "date": "2017-08-29T00:00:00", "db": "VULHUB", "id": "VHN-71319" }, { "date": "2014-09-18T00:00:00", "db": "BID", "id": "69960" }, { "date": "2014-09-24T00:00:00", "db": "JVNDB", "id": "JVNDB-2014-004365" }, { "date": "2014-09-22T00:00:00", "db": "CNNVD", "id": "CNNVD-201409-744" }, { "date": "2024-11-21T02:07:58.547000", "db": "NVD", "id": "CVE-2014-3379" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "specific network environment", "sources": [ { "db": "CNNVD", "id": "CNNVD-201409-744" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco IOS XR Denial of Service Vulnerability", "sources": [ { "db": "CNVD", "id": "CNVD-2014-06162" }, { "db": "CNNVD", "id": "CNNVD-201409-744" } ], "trust": 1.2 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "input validation", "sources": [ { "db": "CNNVD", "id": "CNNVD-201409-744" } ], "trust": 0.6 } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.