Cisco Intrusion Prevention System IP Logging Feature Denial of Service Vulnerability

Bugtraq ID:	70581
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-3406
Remote:	Yes
Local:	No
Published:	Oct 14 2014 12:00AM
Updated:	Oct 14 2014 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Intrusion Prevention System 7.1(7)E4 Cisco Intrusion Prevention System 7.1(6)E4 Cisco Intrusion Prevention System 7.1(5)E4 Cisco Intrusion Prevention System 7.1(4) E4 Cisco Intrusion Prevention System 7.1(3) E4 Cisco Intrusion Prevention System 7.1(2)E4 Cisco Intrusion Prevention System 7.1(1)E4 Cisco Intrusion Prevention System 7.1 Cisco Intrusion Prevention System 7.0 (9)E4 Cisco Intrusion Prevention System 7.0 (8)E4 Cisco Intrusion Prevention System 7.0 (7)E4 Cisco Intrusion Prevention System 7.0 (6)E4 Cisco Intrusion Prevention System 7.0 (4)E4 Cisco Intrusion Prevention System 7.0 (2)E4 Cisco Intrusion Prevention System 7.0 (2)E3 Cisco Intrusion Prevention System 7.0 (1)E3 Cisco Intrusion Prevention System 7.0 Cisco Intrusion Prevention System 6.1 Cisco Intrusion Prevention System 6.0 Cisco Intrusion Prevention System 5.1(2) Cisco Intrusion Prevention System 5.1(1e) Cisco Intrusion Prevention System 5.1(1d) Cisco Intrusion Prevention System 5.1(1c) Cisco Intrusion Prevention System 5.1(1b) Cisco Intrusion Prevention System 5.1(1)
Not Vulnerable:

Cisco Intrusion Prevention System IP Logging Feature Denial of Service Vulnerability

Cisco Intrusion Prevention System is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause denial-of-service conditions.

This issue is being tracked by Cisco Bug ID CSCud82085.

Cisco Intrusion Prevention System IP Logging Feature Denial of Service Vulnerability

An attacker can exploit this issue using readily available tools.

Cisco Intrusion Prevention System IP Logging Feature Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Intrusion Prevention System IP Logging Feature Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Intrusion Prevention System IP Logging Feature Denial of Service Vulnerabi (Cisco )