Cisco IOS and IOS XE Software CVE-2014-3409 Denial of Service Vulnerability

Bugtraq ID:	70715
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-3409
Remote:	Yes
Local:	No
Published:	Oct 24 2014 12:00AM
Updated:	Nov 19 2014 12:57AM
Credit:	Cisco
Vulnerable:	Cisco Ios 12.2SRE Cisco Ios 12.2(33)SRE6 Cisco IOS 12.2(33)SRE4 Cisco IOS 12.2(33)SRE3 Cisco Ios 12.2(33)SRE1
Not Vulnerable:

Cisco IOS and IOS XE Software CVE-2014-3409 Denial of Service Vulnerability

Cisco IOS and IOS XE Software are prone to a remote denial-of-service vulnerability.

Successful exploits may allow attackers to cause the device to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug IDs CSCuq93406 and CSCur49659.

Cisco IOS and IOS XE Software CVE-2014-3409 Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS and IOS XE Software CVE-2014-3409 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS and IOS XE Software CVE-2014-3409 Denial of Service Vulnerability

References:

• Cisco IOS Homepage (Cisco Systems)
  
• Cisco Homepage (Cisco)