CVE-2014-3262: Input Validation
The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service (CEF outage and packet drops) via malformed messages, aka Bug ID CSCun73782.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3262?
CVE-2014-3262 has been assessed as a moderate severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2014-3262?
To mitigate CVE-2014-3262, upgrade to a version of Cisco IOS or IOS XE that is not vulnerable, specifically later than 15.3(3)S.
What types of attacks can CVE-2014-3262 facilitate?
CVE-2014-3262 can allow remote attackers to cause denial of service by sending malformed ITR control messages.
Which Cisco products are affected by CVE-2014-3262?
CVE-2014-3262 affects Cisco IOS versions 15.3(3)S and earlier, as well as specific versions of IOS XE.
What symptoms indicate a potential CVE-2014-3262 exploitation?
Symptoms of exploitation of CVE-2014-3262 include unexpected packet drops and CEF outages in affected network devices.