Cisco IOS and IOS XE Software CVE-2014-3359 DHCPv6 Denial of Service Vulnerability

Bugtraq ID:	70140
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-3359
Remote:	Yes
Local:	No
Published:	Sep 24 2014 12:00AM
Updated:	May 23 2017 04:25PM
Credit:	Cisco
Vulnerable:	Rockwell Automation Stratix 5900 0 Cisco IOS XE Software 3.9S.0.1 Cisco IOS XE Software 3.9S.0 Cisco IOS XE Software 3.8S.2 Cisco IOS XE Software 3.8S.1 Cisco IOS XE Software 3.8S.0 Cisco IOS XE Software 3.7S.4 Cisco IOS XE Software 3.7S.3 Cisco IOS XE Software 3.7S.2 Cisco IOS XE Software 3.7S.1 Cisco IOS XE Software 3.7S.0 Cisco IOS XE Software 3.6S.2 Cisco IOS XE Software 3.6S.1 Cisco IOS XE Software 3.6S.0 Cisco IOS XE Software 3.5S.2 Cisco IOS XE Software 3.5S.1 Cisco IOS XE Software 3.5S.0 Cisco IOS XE Software 3.5E Cisco IOS XE Software 3.4SG.2 Cisco IOS XE Software 3.4SG.1 Cisco IOS XE Software 3.4SG.0 Cisco IOS XE Software 3.4S.6 Cisco IOS XE Software 3.4S.5 Cisco IOS XE Software 3.4S.4 Cisco IOS XE Software 3.4S.3 Cisco IOS XE Software 3.4S.2 Cisco IOS XE Software 3.4S.1 Cisco IOS XE Software 3.4S.0 Cisco IOS XE Software 3.3XO.0 Cisco IOS XE Software 3.3SG.2 Cisco IOS XE Software 3.3SG.1 Cisco IOS XE Software 3.3SG.0 Cisco IOS XE Software 3.3SE.1 Cisco IOS XE Software 3.3SE.0 Cisco IOS XE Software 3.3S.2 Cisco IOS XE Software 3.3S.1 Cisco IOS XE Software 3.3S.0 Cisco IOS XE Software 3.2SE.3 Cisco IOS XE Software 3.2SE.2 Cisco IOS XE Software 3.2SE.1 Cisco IOS XE Software 3.2SE.0 Cisco IOS XE Software 3.2S.2 Cisco IOS XE Software 3.2S.1 Cisco IOS XE Software 3.2S.0 Cisco IOS XE Software 3.1S.3 Cisco IOS XE Software 3.1S.2 Cisco IOS XE Software 3.1S.1 Cisco IOS XE Software 3.1S.0 Cisco IOS XE Software 3.10S.0a Cisco IOS XE Software 3.10S.0 Cisco IOS XE 2.6.2 Cisco IOS XE 2.6.1 Cisco IOS XE 2.4.1 Cisco IOS XE 2.4 Cisco IOS XE 2.3.2 Cisco IOS XE 2.3.1 t Cisco IOS XE 2.2.3 Cisco IOS XE 3.11S.2 Cisco IOS XE 3.11S.1 Cisco IOS XE 2.6.0 Cisco IOS XE 2.5.0 Cisco IOS XE 2.3.0 Cisco IOS XE 2.2.2 Cisco IOS XE 2.1.2 Cisco IOS XE 2.1.0 Cisco IOS XE 15.3(3)S2a Cisco IOS XE 15.3(3)S2 Cisco IOS 15.4T Cisco IOS 15.4S Cisco IOS 15.4CG Cisco IOS 15.4(2)T Cisco IOS 15.4(2)CG Cisco IOS 15.4(1)T1 Cisco IOS 15.4(1)T Cisco IOS 15.4(1)S2 Cisco IOS 15.4(1)S1 Cisco IOS 15.4(1)S0e Cisco IOS 15.4(1)S0d Cisco IOS 15.4(1)S0c Cisco IOS 15.4(1)S0b Cisco IOS 15.4(1)S0a Cisco IOS 15.4(1)S Cisco IOS 15.4(1)CG1 Cisco IOS 15.4(1)CG Cisco IOS 15.3S Cisco IOS 15.3M Cisco IOS 15.3JA Cisco IOS 15.3(3)S3 Cisco IOS 15.3(3)S2 Cisco IOS 15.3(3)S Cisco IOS 15.3(3)M3 Cisco IOS 15.3(3)M2 Cisco IOS 15.3(3)M1 Cisco IOS 15.3(3)M Cisco IOS 15.3(3)JA75 Cisco IOS 15.3(2)S2 Cisco IOS 15.3(2)S1b Cisco IOS 15.3(2)S1 Cisco IOS 15.3(2)S0xa Cisco IOS 15.3(2)S0a Cisco IOS 15.3(2)S Cisco IOS 15.3(1)S2 Cisco IOS 15.3(1)S1e Cisco IOS 15.3(1)S1 Cisco IOS 15.3(1)S Cisco IOS 15.2SNI Cisco IOS 15.2SNH Cisco IOS 15.2SNG Cisco IOS 15.2S Cisco IOS 15.2(4)S5 Cisco IOS 15.2(4)S4a Cisco IOS 15.2(4)S4 Cisco IOS 15.2(4)S3a Cisco IOS 15.2(4)S2 Cisco IOS 15.2(4)S1 Cisco IOS 15.2(4)S0c Cisco IOS 15.2(4)S Cisco IOS 15.2(2)SNH1 Cisco IOS 15.2(2)SNH Cisco IOS 15.2(2)SNG Cisco IOS 15.2(2)S2 Cisco IOS 15.2(2)S1 Cisco IOS 15.2(2)S0d Cisco IOS 15.2(2)S0c Cisco IOS 15.2(2)S0a Cisco IOS 15.2(2)S Cisco IOS 15.2(1)S2 Cisco IOS 15.2(1)S1 Cisco IOS 15.1S Cisco IOS 15.1MRA Cisco IOS 15.1MR Cisco IOS 15.1(3)S6 Cisco IOS 15.1(3)S5a Cisco IOS 15.1(3)S4 Cisco IOS 15.1(3)S3 Cisco IOS 15.1(3)S2 Cisco IOS 15.1(3)S1 Cisco IOS 15.1(3)S0a Cisco IOS 15.1(3)S Cisco IOS 15.1(3)MRA2 Cisco IOS 15.1(3)MRA1 Cisco IOS 15.1(3)MRA
Not Vulnerable:	Rockwell Automation Stratix 5900 15.6.3

Cisco IOS and IOS XE Software CVE-2014-3359 DHCPv6 Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS and IOS XE Software CVE-2014-3359 DHCPv6 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS and IOS XE Software CVE-2014-3359 DHCPv6 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco IOS Homepage (Cisco Systems)
  
• Cisco IOS Software DHCP Version 6 Denial of Service Vulnerability (Cisco)
  
• Advisory (ICSA-17-094-04)Rockwell Automation Stratix 5900 (CERT)
  
• Cisco IOS Software DHCP Version 6 Denial of Service Vulnerability (Cisco)