CVE-2014-3386 in ASA
Summary
The GPRS Tunneling Protocol (GTP) inspection engine in Cisco ASA Software 8.2 before 8.2(5.51), 8.4 before 8.4(7.15), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted series of GTP packets, aka Bug ID CSCum56399.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
05/07/2014
Disclosure
10/10/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67745 | Cisco ASA GPRS Tunneling Protocol Inspection resource management | 399 | Unproven | Official fix | CVE-2014-3386 |