CVE-2014-3379: Input Validation
Published Sep 20, 2014
·Updated
Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (NPU and card hang or reload) via a malformed MPLS packet, aka Bug ID CSCuq10466.
Affected Software
57 affected components
Cisco IOS XR=2.0
Cisco IOS XR=3.0
Cisco IOS XR=3.0.1
Cisco IOS XR=3.1
Cisco IOS XR=3.1.0
Cisco IOS XR=3.2
Cisco IOS XR=3.2.1
Cisco IOS XR=3.2.2
Cisco IOS XR=3.2.4
Cisco IOS XR=3.2.50
Cisco IOS XR=3.3
Cisco IOS XR=3.3.1
Cisco IOS XR=3.3.2
Cisco IOS XR=3.3.3
Cisco IOS XR=3.3.4
Cisco IOS XR=3.3.5
Cisco IOS XR=3.4
Cisco IOS XR=3.4.1
Cisco IOS XR=3.4.2
Cisco IOS XR=3.4.3
Cisco IOS XR=3.5
Cisco IOS XR=3.5.1
Cisco IOS XR=3.5.2
Cisco IOS XR=3.5.3
Cisco IOS XR=3.5.4
Cisco IOS XR=3.6
Cisco IOS XR=3.6.1
Cisco IOS XR=3.6.2
Cisco IOS XR=3.6.3
Cisco IOS XR=3.7
Cisco IOS XR=3.7.1
Cisco IOS XR=3.7.2
Cisco IOS XR=3.7.3
Cisco IOS XR=3.8.0
Cisco IOS XR=3.8.1
Cisco IOS XR=3.8.2
Cisco IOS XR=3.8.3
Cisco IOS XR=3.8.4
Cisco IOS XR=3.9.0
Cisco IOS XR=3.9.1
Cisco IOS XR=3.9.2
Cisco IOS XR=4.0.0
Cisco IOS XR=4.0.1
Cisco IOS XR=4.0.2
Cisco IOS XR=4.0.3
Cisco IOS XR=4.0.4
Cisco IOS XR=4.1
Cisco IOS XR=4.1.1
Cisco IOS XR=4.1.2
Cisco IOS XR=4.2.0
Cisco IOS XR=4.3.0
Cisco IOS XR=4.3.1
Cisco IOS XR=4.3.2
Cisco IOS XR=4.3.4
Cisco IOS XR=5.1.0
Cisco Network Convergence System 6000
Cisco Network Convergence System 6008
Event History
Sep 20, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3379?
CVE-2014-3379 is classified as a high severity vulnerability due to its potential to cause a denial of service on affected devices.
2
How do I fix CVE-2014-3379?
To fix CVE-2014-3379, you should upgrade to a patched version of Cisco IOS XR that addresses this vulnerability.
3
What devices are affected by CVE-2014-3379?
CVE-2014-3379 affects Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices.
4
What are the potential impacts of CVE-2014-3379?
Exploitation of CVE-2014-3379 can lead to denial of service conditions, resulting in NPU and card hangs or reloads.
5
Can CVE-2014-3379 be exploited remotely?
Yes, CVE-2014-3379 can be exploited remotely by attackers using a malformed MPLS packet.