CVE-2014-0710: Race Condition
Published Feb 22, 2014
·Updated
Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) allows remote attackers to cause a denial of service (device reload) via certain matching traffic, aka Bug ID CSCuj16824.
Affected Software
79 affected components
Cisco Firewall Services Module Software=3.1
Cisco Firewall Services Module Software=3.1\(2\)
Cisco Firewall Services Module Software=3.1\(3\)
Cisco Firewall Services Module Software=3.1\(4\)
Cisco Firewall Services Module Software=3.1\(5\)
Cisco Firewall Services Module Software=3.1\(6\)
Cisco Firewall Services Module Software=3.1\(7\)
Cisco Firewall Services Module Software=3.1\(8\)
Cisco Firewall Services Module Software=3.1\(9\)
Cisco Firewall Services Module Software=3.1\(10\)
Cisco Firewall Services Module Software=3.1\(11\)
Cisco Firewall Services Module Software=3.1\(12\)
Cisco Firewall Services Module Software=3.1\(13\)
Cisco Firewall Services Module Software=3.1\(14\)
Cisco Firewall Services Module Software=3.1\(15\)
Cisco Firewall Services Module Software=3.1\(16\)
Cisco Firewall Services Module Software=3.1\(17\)
Cisco Firewall Services Module Software=3.1\(18\)
Cisco Firewall Services Module Software=3.1\(19\)
Cisco Firewall Services Module Software=3.1\(20\)
Cisco Firewall Services Module Software=3.1\(21\)
Cisco Firewall Services Module Software=3.2
Cisco Firewall Services Module Software=3.2\(1\)
Cisco Firewall Services Module Software=3.2\(2\)
Cisco Firewall Services Module Software=3.2\(3\)
Cisco Firewall Services Module Software=3.2\(4\)
Cisco Firewall Services Module Software=3.2\(5\)
Cisco Firewall Services Module Software=3.2\(6\)
Cisco Firewall Services Module Software=3.2\(7\)
Cisco Firewall Services Module Software=3.2\(8\)
Cisco Firewall Services Module Software=3.2\(9\)
Cisco Firewall Services Module Software=3.2\(10\)
Cisco Firewall Services Module Software=3.2\(11\)
Cisco Firewall Services Module Software=3.2\(12\)
Cisco Firewall Services Module Software=3.2\(13\)
Cisco Firewall Services Module Software=3.2\(14\)
Cisco Firewall Services Module Software=3.2\(15\)
Cisco Firewall Services Module Software=3.2\(16\)
Cisco Firewall Services Module Software=3.2\(17\)
Cisco Firewall Services Module Software=3.2\(18\)
Cisco Firewall Services Module Software=3.2\(19\)
Cisco Firewall Services Module Software=3.2\(20\)
Cisco Firewall Services Module Software=3.2\(21\)
Cisco Firewall Services Module Software=3.2\(22\)
Cisco Firewall Services Module Software=3.2\(23\)
Cisco Firewall Services Module Software=3.2\(24\)
Cisco Firewall Services Module Software=3.2\(25\)
Cisco Firewall Services Module Software=3.2\(26\)
Cisco Firewall Services Module Software=3.2\(27\)
Cisco Firewall Services Module Software=4.0
Cisco Firewall Services Module Software=4.0\(1\)
Cisco Firewall Services Module Software=4.0\(2\)
Cisco Firewall Services Module Software=4.0\(3\)
Cisco Firewall Services Module Software=4.0\(4\)
Cisco Firewall Services Module Software=4.0\(5\)
Cisco Firewall Services Module Software=4.0\(6\)
Cisco Firewall Services Module Software=4.0\(7\)
Cisco Firewall Services Module Software=4.0\(8\)
Cisco Firewall Services Module Software=4.0\(10\)
Cisco Firewall Services Module Software=4.0\(11\)
Cisco Firewall Services Module Software=4.0\(12\)
Cisco Firewall Services Module Software=4.0\(13\)
Cisco Firewall Services Module Software=4.0\(14\)
Cisco Firewall Services Module Software=4.0\(15\)
Cisco Firewall Services Module Software=4.1
Cisco Firewall Services Module Software=4.1\(1\)
Cisco Firewall Services Module Software=4.1\(2\)
Cisco Firewall Services Module Software=4.1\(3\)
Cisco Firewall Services Module Software=4.1\(4\)
Cisco Firewall Services Module Software=4.1\(5\)
Cisco Firewall Services Module Software=4.1\(6\)
Cisco Firewall Services Module Software=4.1\(7\)
Cisco Firewall Services Module Software=4.1\(8\)
Cisco Firewall Services Module Software=4.1\(9\)
Cisco Firewall Services Module Software=4.1\(10\)
Cisco Firewall Services Module Software=4.1\(11\)
Cisco Firewall Services Module Software=4.1\(12\)
Cisco Firewall Services Module Software=4.1\(13\)
Cisco Firewall Services Module Software=4.1\(14\)
Event History
Feb 22, 2014
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-0710?
CVE-2014-0710 has been assigned a medium severity rating due to its potential to cause a denial of service.
2
How do I fix CVE-2014-0710?
To resolve CVE-2014-0710, update the Cisco Firewall Services Module Software to version 3.2(28) or later for 3.x versions and 4.1(15) or later for 4.x versions.
3
What systems are affected by CVE-2014-0710?
CVE-2014-0710 affects Cisco Firewall Services Module Software versions 3.x before 3.2(28) and 4.x before 4.1(15).
4
What is the impact of CVE-2014-0710?
The impact of CVE-2014-0710 is the potential for remote attackers to trigger a denial of service that can cause the device to reload.
5
What is the cause of the CVE-2014-0710 vulnerability?
CVE-2014-0710 is caused by a race condition in the cut-through proxy feature of the Cisco Firewall Services Module.