Vulnerabilities > CVE-2014-3293 - Resource Management Errors vulnerability in Cisco Asr901 and IOS
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing, which allows remote attackers to cause a denial of service (BGP neighbor flapping) by sending many crafted IPv4 packets, aka Bug ID CSCuo29736.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 | |
| Hardware | 1 |
Common Weakness Enumeration (CWE)
References
- http://secunia.com/advisories/61830
- http://secunia.com/advisories/61830
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3293
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3293
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36195
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36195
- http://www.securityfocus.com/bid/70744
- http://www.securityfocus.com/bid/70744
- http://www.securitytracker.com/id/1031122
- http://www.securitytracker.com/id/1031122
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97769
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97769