VulnerabilityModified
CVE-2014-8005
Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (process reload) by establishing many TCP sessions, aka Bug ID CSCuq45239.
MEDIUM 5.0EPSS 1.19%
Does this matter?
Lower severity and a low EPSS score (1.19%). Track it; it rarely justifies an emergency change on its own.
Description
Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (process reload) by establishing many TCP sessions, aka Bug ID CSCuq45239.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 1.19% probability · 66th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362
- Affected
- cisco/ios xr
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8005Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36532Vendor Advisory
- http://www.securityfocus.com/bid/71287
- http://www.securitytracker.com/id/1031262
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98937
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-8005Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36532Vendor Advisory
- http://www.securityfocus.com/bid/71287
- http://www.securitytracker.com/id/1031262
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98937
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.