CVE-2014-3271: Input Validation
Published May 20, 2014
·Updated
The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs CSCum85558, CSCum20949, CSCul61849, and CSCul71149.
Affected Software
1 affected component
Cisco IOS XR
Event History
May 20, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Data Sourced
via NVD·11:13 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-3271?
CVE-2014-3271 has a severity rating that indicates it can cause device crashes, resulting in denial of service.
2
How do I fix CVE-2014-3271?
To fix CVE-2014-3271, it is recommended to update Cisco IOS XR to the latest version that addresses this vulnerability.
3
Who can exploit CVE-2014-3271?
CVE-2014-3271 can be exploited by remote attackers who send specially crafted malformed DHCPv6 packets.
4
What devices are affected by CVE-2014-3271?
CVE-2014-3271 affects devices running Cisco IOS XR, including some models within the Cisco IOS XRv 9000 series.
5
What type of attack does CVE-2014-3271 enable?
CVE-2014-3271 enables attackers to launch a denial of service attack leading to device crashes.