Cisco IPS analysis engine DoS Vulnerability (CVE-2014-0718)

Release date:
Updated on:

Affected Systems:
Cisco ip4200 Series Sensors
Description:
--------------------------------------------------------------------------------
Bugtraq id: 65665
CVE (CAN) ID: CVE-2014-0718

Cisco IPS Software is a network intrusion prevention Software.

A security vulnerability exists when Cisco IPS processes IPv4 and IPv6 packet segments. unauthenticated remote attackers can exploit this vulnerability to cause the analysis engine process to crash and cause DOS.

<* Source: vendor

Link: http://tools.cisco.com/security/center/viewAlert.x? AlertId = 32840
Http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ips
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Cisco
-----
Cisco has released a Security Bulletin (cisco-sa-20140219-ips) and patches for this:
Cisco-sa-20140219-ips: Multiple Vulnerabilities in Cisco IPS Software
Link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ips