Buffer overflow in Cisco iOS

CVE-2014-3361

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service (device reload) via multipart SDP IPv4 traffic, aka Bug ID CSCun54071.

Vulnerability class: Buffer Overflow

EPSS: 0.024 (82.1th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 15.0, 15.1, 15.2
  • N/a — versions n/a

Weakness classification (CWE)

References