The session-manager service in Cisco StarOS 12.0, 12.2(300), 14.0, and 14.0(600) on ASR 5000 devices allows remote attackers to cause a denial of service (service reload and packet loss) via malformed HTTP packets, aka Bug ID CSCud14217.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Staros | Cisco | 12.0 (including) | 12.0 (including) |
| Staros | Cisco | 12.2(300) (including) | 12.2(300) (including) |
| Staros | Cisco | 14.0 (including) | 14.0 (including) |
| Staros | Cisco | 14.0(600) (including) | 14.0(600) (including) |