Cisco IOS XR Software CVE-2014-8005 TCP Session Denial of Service Vulnerability

Bugtraq ID:	71287
Class:	Race Condition Error
CVE:	CVE-2014-8005
Remote:	Yes
Local:	No
Published:	Nov 25 2014 12:00AM
Updated:	Nov 25 2014 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco IOS XR Software CVE-2014-8005 TCP Session Denial of Service Vulnerability

Cisco IOS XR Software is prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause the lighttpd process to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCuq45239.

Cisco IOS XR Software CVE-2014-8005 TCP Session Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS XR Software CVE-2014-8005 TCP Session Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS XR Software CVE-2014-8005 TCP Session Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco IOS XR Software Homepage (Cisco)