CVE-2014-3358

Cisco IOS 15.0-15.4 & IOS XE DoS via Malformed mDNS Packets

Title source: llm

Description

Memory leak in Cisco IOS 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.3.xSE before 3.3.2SE, 3.3.xXO before 3.3.1XO, 3.5.xE before 3.5.2E, and 3.11.xS before 3.11.1S allows remote attackers to cause a denial of service (memory consumption, and interface queue wedge or device reload) via malformed mDNS packets, aka Bug ID CSCuj58950.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/96183

Various Sources x_refsource_confirm

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns/cvrf/cisco-sa-20140924-mdns_cvrf.xml

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/70139

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-mdns

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030898

Scores

EPSS 0.0285

EPSS Percentile 85.0%

Details

CWE

CWE-78

Status published

Products (10)

cisco/ios 15.0

cisco/ios 15.1

cisco/ios 15.2

cisco/ios 15.4

cisco/ios_xe 3.3\(.0\)xo

cisco/ios_xe 3.3.0se

cisco/ios_xe 3.3.1se

cisco/ios_xe 3.5.0e

cisco/ios_xe 3.5.1e

cisco/ios_xe 3.11.0s

Published Sep 25, 2014

Tracked Since Feb 18, 2026