First published: Thu Mar 27 2014(Updated: )
Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service (I/O memory consumption and device reload) via a malformed IPv6 packet, aka Bug ID CSCui59540.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS | =15.1 | |
Cisco IOS | =15.2 | |
Cisco IOS | =15.3 | |
Cisco IOS XE | =3.3.0s | |
Cisco IOS XE | =3.3.0sg | |
Cisco IOS XE | =3.3.1s | |
Cisco IOS XE | =3.3.1sg | |
Cisco IOS XE | =3.3.2s | |
Cisco IOS XE | =3.3.3s | |
Cisco IOS XE | =3.3s\(.0\) | |
Cisco IOS XE | =3.3s\(.1\) | |
Cisco IOS XE | =3.3s\(.2\) | |
Cisco IOS XE | =3.5.0s | |
Cisco IOS XE | =3.5.1s | |
Cisco IOS XE | =3.5.xs | |
Cisco IOS XE | =3.5s\(.0\) | |
Cisco IOS XE | =3.5s\(.1\) | |
Cisco IOS XE | =3.5s\(.2\) | |
Cisco IOS XE | =3.7.0s | |
Cisco IOS XE | =3.7.1s | |
Cisco IOS XE | =3.7.2s | |
Cisco IOS XE | =3.7s\(.0\) | |
Cisco IOS XE | =3.7s\(.1\) | |
Cisco IOS XE | =3.8.0s | |
Cisco IOS XE | =3.8s\(.0\) | |
Cisco IOS XE | =3.8s\(.1\) | |
Cisco IOS XE | =3.8s\(.2\) | |
Cisco IOS XE | =3.9.0s | |
Cisco IOS XE | =3.9.1s | |
Cisco IOS XE | =3.10 | |
Cisco IOS XE | =3.10.0s | |
Cisco IOS XE | =3.10.1s | |
Cisco IOS XE | =3.10.1s1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2014-2113 has a CVSS v2 base score of 7.8, indicating it is a high severity vulnerability.
To fix CVE-2014-2113, upgrade to the Cisco IOS or IOS XE versions that contain the patch, specifically any version after 3.5.2E or 3.10.2S.
CVE-2014-2113 can be exploited by remote attackers to cause a denial of service by sending malformed IPv6 packets.
CVE-2014-2113 affects Cisco IOS versions 15.1 to 15.3 and IOS XE versions up to 3.10.1s.
Exploiting CVE-2014-2113 can lead to I/O memory consumption that causes the affected device to reload.