CVE-2014-3388: High severity cisco asa software vulnerability

Published Oct 10, 2014

Updated

The DNS inspection engine in Cisco ASA Software 9.0 before 9.0(4.13), 9.1 before 9.1(5.7), and 9.2 before 9.2(2) allows remote attackers to cause a denial of service (device reload) via crafted DNS packets, aka Bug ID CSCuo68327.

Affected Software

3 affected components

Cisco ASA=9.0

Cisco ASA=9.1

Cisco ASA=9.2

Event History

Oct 10, 2014

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3388?

CVE-2014-3388 is rated as a high severity vulnerability due to its potential to cause a denial of service by triggering a device reload.

How do I fix CVE-2014-3388?

To mitigate CVE-2014-3388, upgrade Cisco ASA software to version 9.0(4.13), 9.1(5.7), or 9.2(2) or later.

What types of attacks can exploit CVE-2014-3388?

CVE-2014-3388 can be exploited through specially crafted DNS packets sent to the Cisco ASA device.

Which Cisco ASA software versions are affected by CVE-2014-3388?

CVE-2014-3388 affects Cisco ASA software versions 9.0 prior to 9.0(4.13), 9.1 prior to 9.1(5.7), and 9.2 prior to 9.2(2).

Is there a workaround for CVE-2014-3388?

There are no known workarounds for CVE-2014-3388; the only solution is to apply the necessary software updates.