Unscored CVE-2014-3322 EUVD-2014-3335GHSA-qjvm-m4mm-3r2j

Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attacker…

Published Jul 24, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and card hangs) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuo68417.

References

60311 third-party-advisory
1030623 vdb-entry
20140722 Cisco IOS XR Software NetFlow Processing Denial of Service Vulnerability vendor-advisory
68833 vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=35009