CVE-2014-3379
published 2014-09-20CVE-2014-3379: Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via…
PriorityP425medium6.1CVSS 2.0
AVAACLAuNCNINAC
EPSS
0.87%
55.2th percentile
Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet, aka Bug ID CSCuq10466.
Affected
55 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
| cisco | ios_xr | — | — |
CVSS provenance
nvdv2.06.1MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS XR Software Malformed MPLS Packet Denial of Service Vulnerability
vendor_cisco·2014-09-19·CVSS 6.1
CVE-2014-3379 [MEDIUM] CWE-20 Cisco IOS XR Software Malformed MPLS Packet Denial of Service Vulnerability
Cisco IOS XR Software Malformed MPLS Packet Denial of Service Vulnerability
A vulnerability in parsing of malformed Multiprotocol Label Switching (MPLS) packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 Series Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor unit (NPU) and a line card that is processing traffic.
The vulnerability is due to insufficient logic in parsing MPLS packets. An attacker could exploit this vulnerability by sending a malformed MPLS packet to be processed by the affected device. An exploit could allow the attacker to cause a lockup and eventual reload of a network processor unit and a line card, leading to a denial of service (DoS) condition.
Cisco has confirmed the vulne
GHSA
GHSA-qw4q-mjmj-xfqp: Cisco IOS XR 5
ghsa_unreviewed·2022-05-17
CVE-2014-3379 [MEDIUM] CWE-20 GHSA-qw4q-mjmj-xfqp: Cisco IOS XR 5
Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet, aka Bug ID CSCuq10466.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/61372http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3379http://tools.cisco.com/security/center/viewAlert.x?alertId=35776http://www.securityfocus.com/bid/69960http://www.securitytracker.com/id/1030878https://exchange.xforce.ibmcloud.com/vulnerabilities/96068http://secunia.com/advisories/61372http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3379http://tools.cisco.com/security/center/viewAlert.x?alertId=35776http://www.securityfocus.com/bid/69960http://www.securitytracker.com/id/1030878https://exchange.xforce.ibmcloud.com/vulnerabilities/96068
2014-09-20
Published