Cisco IOS and IOS XE Software CVE-2014-3356 Denial of Service Vulnerability

Bugtraq ID:	70135
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-3356
Remote:	Yes
Local:	No
Published:	Sep 24 2014 12:00AM
Updated:	May 23 2017 04:24PM
Credit:	Cisco
Vulnerable:	Rockwell Automation Stratix 5900 0 Cisco IOS XE Software 3.9S.0.2 Cisco IOS XE Software 3.9S.0.1 Cisco IOS XE Software 3.9S.0 Cisco IOS XE Software 3.8S.2 Cisco IOS XE Software 3.8S.1 Cisco IOS XE Software 3.8S.0 Cisco IOS XE Software 3.7S.5 Cisco IOS XE Software 3.7S.4 Cisco IOS XE Software 3.7S.3 Cisco IOS XE Software 3.7S.2 Cisco IOS XE Software 3.7S.1 Cisco IOS XE Software 3.7S.0 Cisco IOS XE Software 3.6S.2 Cisco IOS XE Software 3.6S.1 Cisco IOS XE Software 3.6S.0 Cisco IOS XE Software 3.10S.3 Cisco IOS XE Software 3.10S.2 Cisco IOS XE Software 3.10S.1 Cisco IOS XE Software 3.10S.0a Cisco IOS XE Software 3.10S.0 Cisco IOS 15.3T Cisco IOS 15.3S Cisco IOS 15.3M Cisco IOS 15.3(3)S2 Cisco IOS 15.3(3)S Cisco IOS 15.3(3)M3 Cisco IOS 15.3(3)M2 Cisco IOS 15.3(3)M1 Cisco IOS 15.3(3)M Cisco IOS 15.3(2)T3 Cisco IOS 15.3(2)T2 Cisco IOS 15.3(2)T1 Cisco IOS 15.3(2)T Cisco IOS 15.3(2)S1 Cisco IOS 15.3(2)S0xa Cisco IOS 15.3(2)S0a Cisco IOS 15.3(2)S Cisco IOS 15.3(1)T4 Cisco IOS 15.3(1)T3 Cisco IOS 15.3(1)T2 Cisco IOS 15.3(1)T1 Cisco IOS 15.3(1)T Cisco IOS 15.3(1)S1 Cisco IOS 15.3(1)S Cisco IOS 15.2XB Cisco IOS 15.2XA Cisco IOS 15.2T Cisco IOS 15.2S Cisco IOS 15.2M Cisco IOS 15.2GCA Cisco IOS 15.2GC Cisco IOS 15.2(4)XB10 Cisco IOS 15.2(4)S2 Cisco IOS 15.2(4)M6 Cisco IOS 15.2(4)M5 Cisco IOS 15.2(4)M4 Cisco IOS 15.2(4)M3 Cisco IOS 15.2(4)M2 Cisco IOS 15.2(4)M1 Cisco IOS 15.2(4)M Cisco IOS 15.2(4)GC1 Cisco IOS 15.2(4)GC Cisco IOS 15.2(3)XA Cisco IOS 15.2(3)T3 Cisco IOS 15.2(3)T2 Cisco IOS 15.2(3)T1 Cisco IOS 15.2(3)T Cisco IOS 15.2(3)GCA1 Cisco IOS 15.2(3)GCA Cisco IOS 15.2(3)GC1 Cisco IOS 15.2(3)GC Cisco IOS 15.2(2)T4 Cisco IOS 15.2(2)T3 Cisco IOS 15.2(2)T2 Cisco IOS 15.2(2)T1 Cisco IOS 15.2(2)S1 Cisco IOS 15.2(2)GC Cisco IOS 15.2(1)T3a Cisco IOS 15.2(1)T3 Cisco IOS 15.2(1)T2 Cisco IOS 15.2(1)T1 Cisco IOS 15.2(1)T Cisco IOS 15.2(1)GC2 Cisco IOS 15.2(1)GC1 Cisco IOS 15.2(1)GC Cisco IOS 15.1SY Cisco IOS 15.1(2)SY3 Cisco IOS 15.1(2)SY2 Cisco IOS 15.1(2)SY1 Cisco IOS 15.1(2)SY Cisco IOS 15.1(1)SY3 Cisco IOS 15.1(1)SY2 Cisco IOS 15.1(1)SY1 Cisco IOS 15.1(1)SY
Not Vulnerable:	Rockwell Automation Stratix 5900 15.6.3

Cisco IOS and IOS XE Software CVE-2014-3356 Denial of Service Vulnerability

Cisco IOS and IOS XE Software are prone to a remote denial-of-service vulnerability.

Successful exploits may allow attackers to cause the device to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCue22753.

Cisco IOS and IOS XE Software CVE-2014-3356 Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS and IOS XE Software CVE-2014-3356 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.