Cisco Systems Inc. announced that its security appliances can crash while handling Jumbo Ethernet frames. Cisco has published a software patch designed to address a denial of service vulnerability in its Intrusion Prevention System (IPS) appliances. Although IPS systems are designed to block common hacker attacks and exploits, a big in the devices meant that “kernel panic” leading to a crash might be induced when processing Jumbo Ethernet packets. The flaw only applies where Cisco IPS platforms have Gigabit network interfaces installed and where these are deployed in inline mode.
Read the full article here