Cisco IOS Software TCP input Vulnerability

Release date:
Updated on:

Affected Systems:
Cisco IOS 15.1-15.4
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2014-2109
 
Cisco IOS is an interconnected network operating system used on most Cisco system routers and network switches.
 
A security vulnerability exists in the TCP input module of Cisco IOS 15.1-15.4. unauthenticated remote attackers can exploit this vulnerability to overload affected devices, resulting in DOS (memory depletion ).
 
<* Source: vendor

Link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-nat
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Cisco
-----
Cisco has released a Security Bulletin (cisco-sa-20140326-nat) and patches for this:
Cisco-sa-20140326-nat: Cisco IOS Software Network Address Translation Vulnerabilities
Link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-nat