CVE-2015-6271

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

CVE-2015-6270

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv6 packet, aka Bug ID CSCsv98555...

CVE-2015-6269

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted 1 IPv4 or 2 IPv6 packet, aka Bug ID CSCsw69990...

Design/Logic Flaw

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

Code injection

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted 1 IPv4 or 2 IPv6 packet, aka Bug ID CSCsw69990...

Code injection

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064...

Code injection

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv6 packet, aka Bug ID CSCsv98555...

CVE-2015-6269

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted 1 IPv4 or 2 IPv6 packet, aka Bug ID CSCsw69990...

CVE-2015-6272

Cisco IOS XE 2.1.0 through 2.2.3 and 2.3.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted H.323 packet, aka Bug ID CSCsx35393, CSCsx07094, and CSCsw93064...

CVE-2015-6271

CVE-2015-6271 affects Cisco IOS XE (versions 2.1.0–2.4.3 and 2.5.0) on ASR 1000 devices. When NAT Application Layer Gateway is enabled, remote attackers can cause a denial of service by sending crafted SIP packets that crash the Embedded Services Processor. This is documented with Bug IDs CSCta74...

CVE-2015-6269

Cisco IOS XE before 2.2.3 on ASR 1000 devices is affected by CVE-2015-6269, which allows remote attackers to cause a denial of service by sending crafted IPv4 or IPv6 packets, triggering an Embedded Services Processor crash (Bug ID CSCsw69990). Affected product: ASR 1000 series routers running IO...

CVE-2015-6271

Cisco IOS XE 2.1.0 through 2.4.3 and 2.5.0 on ASR 1000 devices, when NAT Application Layer Gateway is used, allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted SIP packet, aka Bug IDs CSCta74749 and CSCta77008...

CVE-2015-6270

Cisco IOS XE before 2.2.3 on ASR 1000 devices is affected by CVE-2015-6270. A crafted IPv6 packet can remotely trigger a denial of service by crashing the Embedded Services Processor (ESP). This vulnerability is tied to Bug ID CSCsv98555. The available documents specify affected software (Cisco I...

CVE-2015-6272

Cisco IOS XE 2.1.0–2.2.3 and 2.3.0 on ASR 1000 devices are affected when NAT Application Layer Gateway is enabled. A crafted H.323 packet can cause the Embedded Services Processor to crash, leading to a denial of service. The issue is triggered by NAT ALG handling of H.323 messages; no explicit e...

CVE-2015-6270

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv6 packet, aka Bug ID CSCsv98555...

CVE-2015-6273

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

CVE-2015-6268

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482...

CVE-2015-6267

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496...

Command injection

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496...

Code injection

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482...