Unscored CVE-2014-3262 EUVD-2014-3275GHSA-mf7q-r36h-f2c2

The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters…

Published May 16, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service (CEF outage and packet drops) via malformed messages, aka Bug ID CSCun73782.

References

1030243 vdb-entry
20140514 Cisco IOS Software and IOS XE Software LISP Denial of Service Vulnerability vendor-advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34233