Detections
Analytics
Cisco IOS XE Software Multiple mDNS Gateway DoS Vulnerabilities (cisco-sa-20140924-mdns)
high Nessus Plugin ID 78030
Language:
Synopsis
The remote device is missing a vendor-supplied security patch.Description
According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by two unspecified denial of service vulnerabilities in the multicast DNS (mDNS) implementation. A remote attacker can exploit this issue by sending a specially crafted mDNS packet to cause the device to reload.Note that mDNS is enabled by default if the fix for bug CSCum51028 has not been applied.
Solution
Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20140924-mdns.See Also
http://www.nessus.org/u?e2f51db1
https://tools.cisco.com/security/center/viewAMBAlert.x?alertId=35023
https://tools.cisco.com/security/center/viewAlert.x?alertId=35607
https://tools.cisco.com/security/center/viewAlert.x?alertId=35608
Plugin Details
Severity: High
ID: 78030
File Name: cisco-sa-20140924-mdns-iosxe.nasl
Version: 1.11
Type: combined
Family: CISCO
Published: 10/2/2014
Updated: 5/3/2024
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.4
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
Vulnerability Information
CPE: cpe:/o:cisco:ios_xe
Required KB Items: Host/Cisco/IOS-XE/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 9/24/2014
Vulnerability Publication Date: 9/24/2014
Reference Information
CVE: CVE-2014-3357, CVE-2014-3358
CISCO-SA: cisco-sa-20140924-mdns
CISCO-BUG-ID: CSCuj58950, CSCul90866