Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a series of crafted MPLS packets, aka Bug ID CSCuo91149.
References
Link | Resource |
---|---|
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3321 | Vendor Advisory |
http://tools.cisco.com/security/center/viewAlert.x?alertId=34936 | Vendor Advisory |
http://www.securitytracker.com/id/1030597 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2014-07-17 17:55
Updated : 2017-01-12 03:51
NVD link : CVE-2014-3321
Mitre link : CVE-2014-3321
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
cisco
- asr_9006
- asr_9912
- ios_xr
- asr_9922
- asr_9000_rsp440_router
- asr_9010
- asr_9001
- asr_9904