CVE-2014-2141 - The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service (card reset) via crafted session-close actions, aka Bug ID CSCug97416

Back Back to CVE browser

MEDIUM

The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service (card reset) via crafted session-close actions, aka Bug ID CSCug97416

Published Apr 10, 2014

4.0

MEDIUM

CVSS 2.0

EPSS 1.42%

Description

The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service (card reset) via crafted session-close actions, aka Bug ID CSCug97416.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2141
vendor-advisoryx_refsource_CISCOVendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=33682
x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-2181
Advisory

Link	Providers	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2141		vendor-advisoryx_refsource_CISCOVendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=33682		x_refsource_CONFIRMVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-2181		Advisory