Cisco IPS Jumbo Frame DoS
For a networking company, that’s gotta hurt.
From Cisco:
Cisco Intrusion Prevention System (IPS) platforms that have gigabit network interfaces installed and are deployed in inline mode contain a denial of service vulnerability in the handling of jumbo Ethernet frames. This vulnerability may lead to a kernel panic that requires a power cycle to recover platform operation. Platforms deployed in promiscuous mode only or that do not contain gigabit network interfaces are not vulnerable.
Cisco has released free software updates that address this vulnerability. There is a workaround for this vulnerability.
Update or workaround? Which is it then? At the very least get your patch on.
[Source: Liquidmatrix]
Post a Comment