CVE-2014-3331: Input Validation
First published: Wed Aug 20 2014(Updated: )
The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through 16.1.2, and 17.0 allows remote attackers to cause a denial of service (process crash) via a crafted TCP packet, aka Bug ID CSCuo21914.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco ASR 5000 Series Software | =11.0 | |
| Cisco ASR 5000 Series Software | =12.0 | |
| Cisco ASR 5000 Series Software | =12.1 | |
| Cisco ASR 5000 Series Software | =12.2 | |
| Cisco ASR 5000 Series Software | =14.0 | |
| Cisco ASR 5000 Series Software | =15.0 | |
| Cisco ASR 5000 Series Software | =16.1.0 | |
| Cisco ASR 5000 Series Software | =16.1.1 | |
| Cisco ASR 5000 Series Software | =16.1.2 | |
| Cisco ASR 5000 Series Software | =17.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/60706
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3331
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35346
- http://www.securityfocus.com/bid/69281
- http://www.securitytracker.com/id/1030747
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95357
- collector/nvd-index
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/type
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco asr 5000 series software
- version/cisco asr 5000 series software/11.0
- version/cisco asr 5000 series software/12.0
- version/cisco asr 5000 series software/12.1
- version/cisco asr 5000 series software/12.2
- version/cisco asr 5000 series software/14.0
- version/cisco asr 5000 series software/15.0
- version/cisco asr 5000 series software/16.1.0
- version/cisco asr 5000 series software/16.1.1
- version/cisco asr 5000 series software/16.1.2
- version/cisco asr 5000 series software/17.0.0