Cisco IronPort Email Security Appliance CVE-2014-8016 Denial of Service Vulnerability

Bugtraq ID:	71779
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-8016
Remote:	Yes
Local:	No
Published:	Dec 23 2014 12:00AM
Updated:	Dec 23 2014 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IronPort Email Security Appliance CX1070 Cisco IronPort Email Security Appliance C670 Cisco IronPort Email Security Appliance C370D Cisco IronPort Email Security Appliance C370 Cisco IronPort Email Security Appliance C160 Cisco IronPort Email Security Appliance 7.5 Cisco IronPort Email Security Appliance 7.3 Cisco IronPort Email Security Appliance 7.2 Cisco IronPort Email Security Appliance 7.1 Cisco IronPort Email Security Appliance 7.0
Not Vulnerable:

Cisco IronPort Email Security Appliance CVE-2014-8016 Denial of Service Vulnerability

Cisco IronPort Email Security Appliance is prone to a denial-of-service vulnerability.

Successful exploitation of the issue will cause excessive CPU consumption, resulting in a denial-of-service condition.

This issue is being tracked by Cisco Bug ID CSCzv93864.

Cisco IronPort Email Security Appliance CVE-2014-8016 Denial of Service Vulnerability

An attacker can exploit this issue using readily available tools.

Cisco IronPort Email Security Appliance CVE-2014-8016 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IronPort Email Security Appliance CVE-2014-8016 Denial of Service Vulnerability

References:

• Cisco Email Security Appliance Homepage (Cisco)
  
• Cisco Homepage (Cisco )
  
• Cisco IronPort ESA Subject Header Length Denial of Service Vulnerability (Cisco)