First published: Sat Feb 22 2014(Updated: )
Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via a flood of jumbo frames, aka Bug ID CSCuh94944.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IPS Sensor Software | <=7.1\(1\)e4 | |
Cisco IPS Sensor Software | =7.1\(2\)e4 | |
Cisco IPS Sensor Software | =7.1\(3\)e4 | |
Cisco IPS Sensor Software | =7.1\(4\)e4 | |
Cisco IPS Sensor Software | =7.1\(6\)e4 | |
Cisco IPS Sensor Software | =7.1\(7\)e4 | |
Cisco IPS Sensor Software | =7.1\(8\)e4 | |
Cisco IPS Sensor Software | =7.2\(1\)e4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-0720 is classified as a high severity vulnerability due to its potential to cause denial of service.
To fix CVE-2014-0720, upgrade your Cisco IPS Software to version 7.1(8)E4 or 7.2(2)E4 or later.
CVE-2014-0720 affects Cisco IPS Software versions prior to 7.1(8)E4 and 7.2(2)E4.
CVE-2014-0720 is associated with remote denial of service attacks using a flood of jumbo frames.
Yes, CVE-2014-0720 is a vulnerability found in Cisco IPS Sensor Software versions before the specified updates.