CVE-2014-3357
published 2014-09-25CVE-2014-3357: Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allow remote…
PriorityP434high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.85%
85.2th percentile
Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allow remote attackers to cause a denial of service (device reload) via malformed mDNS packets, aka Bug ID CSCul90866.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
| cisco | ios_xe | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Multiple Vulnerabilities in Cisco IOS Software Multicast Domain Name System
vendor_cisco·2014-09-24·CVSS 7.8
CVE-2014-3357 [HIGH] CWE-20 Multiple Vulnerabilities in Cisco IOS Software Multicast Domain Name System
Multiple Vulnerabilities in Cisco IOS Software Multicast Domain Name System
The Cisco IOS Software implementation of the multicast Domain Name System (mDNS) feature contains the following vulnerabilities when processing mDNS packets that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition:
Cisco IOS Software mDNS Gateway Memory Leak Vulnerability
Cisco IOS Software mDNS Gateway Denial of Service Vulnerability
Cisco has released software updates that address these vulnerabilities. This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns
Note: The September 24, 2014, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advi
Cisco
Multiple Vulnerabilities in Cisco IOS Software Multicast Domain Name System
vendor_cisco
CVE-2014-3357 Multiple Vulnerabilities in Cisco IOS Software Multicast Domain Name System
CVE-2014-3357: Multiple Vulnerabilities in Cisco IOS Software Multicast Domain Name System
The Cisco IOS Software implementation of the multicast Domain Name System (mDNS) feature contains the following vulnerabilities when processing mDNS packets that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition: Cisco IOS Software mDNS Gateway Memory Leak Vulnerability Cisco IOS Software mDNS Gateway Denial of Service Vulnerability Cisco has released software updates that address these vulnerabilities. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns Note: The September 24, 2014, Cisco IOS Software Security Advisory bundled publication includes six Cisco Se
GHSA
GHSA-wv3m-m5wx-9rqj: Cisco IOS 15
ghsa_unreviewed·2022-05-17
CVE-2014-3357 [HIGH] CWE-78 GHSA-wv3m-m5wx-9rqj: Cisco IOS 15
Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allow remote attackers to cause a denial of service (device reload) via malformed mDNS packets, aka Bug ID CSCul90866.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdnshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns/cvrf/cisco-sa-20140924-mdns_cvrf.xmlhttp://www.securityfocus.com/bid/70132http://www.securitytracker.com/id/1030898https://exchange.xforce.ibmcloud.com/vulnerabilities/96182http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdnshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns/cvrf/cisco-sa-20140924-mdns_cvrf.xmlhttp://www.securityfocus.com/bid/70132http://www.securitytracker.com/id/1030898https://exchange.xforce.ibmcloud.com/vulnerabilities/96182
2014-09-25
Published