CVE-2014-2168: Buffer Overflow
Published May 2, 2014
·Updated
Buffer overflow in Cisco TelePresence TC Software 4.x and 5.x and TE Software 4.x and 6.0 allows remote attackers to execute arbitrary code via crafted DNS response packets, aka Bug ID CSCty44804.
Affected Software
26 affected components
Cisco Telepresence Te Software=4.1.0
Cisco Telepresence Te Software=4.1.1
Cisco Telepresence Te Software=4.1.2
Cisco Telepresence Te Software=4.1.3
Cisco Telepresence Te Software=6.0
Cisco TelePresence TC Software=4.0.0
Cisco TelePresence TC Software=4.0.1
Cisco TelePresence TC Software=4.0.4
Cisco TelePresence TC Software=4.1.1
Cisco TelePresence TC Software=4.1.2
Cisco TelePresence TC Software=4.2.0
Cisco TelePresence TC Software=4.2.1
Cisco TelePresence TC Software=4.2.2
Cisco TelePresence TC Software=4.2.3
Cisco TelePresence TC Software=4.2.4
Cisco TelePresence TC Software=5.0.0
Cisco TelePresence TC Software=5.0.1
Cisco TelePresence TC Software=5.0.2
Cisco TelePresence TC Software=5.1.0
Cisco TelePresence TC Software=5.1.1
Cisco TelePresence TC Software=5.1.2
Cisco TelePresence TC Software=5.1.3
Cisco TelePresence TC Software=5.1.4
Cisco TelePresence TC Software=5.1.5
Cisco TelePresence TC Software=5.1.6
Cisco TelePresence TC Software=5.1.7
Event History
May 2, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·10:55 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2168?
CVE-2014-2168 is rated as high severity due to its potential to allow remote code execution.
2
How do I fix CVE-2014-2168?
To mitigate CVE-2014-2168, update your Cisco TelePresence TC Software or TE Software to a patched version provided by Cisco.
3
Which Cisco software versions are affected by CVE-2014-2168?
CVE-2014-2168 affects Cisco TelePresence TC Software versions 4.x, 5.x and TE Software versions 4.x, 6.0.
4
What type of attack does CVE-2014-2168 enable?
CVE-2014-2168 enables remote attackers to execute arbitrary code via crafted DNS response packets.
5
Is there a workaround for CVE-2014-2168?
There are no specific workarounds for CVE-2014-2168; applying updates from Cisco is the recommended solution.