CVE-2014-3384
First published: Fri Oct 10 2014(Updated: )
The IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted packet that is sent during tunnel creation, aka Bug ID CSCum96401.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco ASA Software | =8.4 | |
| Cisco ASA Software | =8.4.1 | |
| Cisco ASA Software | =8.4.2 | |
| Cisco ASA Software | =8.4.3 | |
| Cisco ASA Software | =8.4.4 | |
| Cisco ASA Software | =8.6 | |
| Cisco ASA Software | =8.6.1 | |
| Cisco ASA Software | =9.0 | |
| Cisco ASA Software | =9.1 | |
| Cisco ASA Software | =9.1.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-3384?
CVE-2014-3384 has a High severity rating due to its potential to allow remote attackers to cause a denial of service.
How do I fix CVE-2014-3384?
To fix CVE-2014-3384, update Cisco ASA Software to the fixed versions: 8.4(7.15), 8.6(1.14), 9.0(4.8), or 9.1(5.1) or later.
What impact does CVE-2014-3384 have on affected Cisco ASA versions?
CVE-2014-3384 can cause a device reload, leading to a denial of service during IKEv2 tunnel creation.
Which Cisco ASA software versions are vulnerable to CVE-2014-3384?
Vulnerable versions include Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1).
Who can exploit CVE-2014-3384?
CVE-2014-3384 can be exploited by remote attackers sending crafted packets to the affected Cisco ASA devices.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco asa software
- version/cisco asa software/8.4
- version/cisco asa software/8.4.1
- version/cisco asa software/8.4.2
- version/cisco asa software/8.4.3
- version/cisco asa software/8.4.4
- version/cisco asa software/8.6
- version/cisco asa software/8.6.1
- version/cisco asa software/9.0
- version/cisco asa software/9.1
- version/cisco asa software/9.1.5