CVE-2015-6334

The CVE-2015-6334 issue affects Cisco ASR 5000 and ASR 5500 systems running software 18.0.0.57828 and 19.0.M0.61045. A crafted TACACS header in a TACACS packet can trigger the vpnmgr process to restart, causing a denial of service. The root cause is improper input validation of the TACACS packet ...

CVE-2015-6334

Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service vpnmgr process restart via a crafted header in a TACACS packet, aka Bug ID CSCuw01984...

Oracle: Security Advisory (ELSA-2008-0008)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-6256

Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service OSPF process restart via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820...

Code injection

Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service OSPF process restart via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820...

CVE-2015-6256

CVE-2015-6256 affects Cisco ASR 5000 devices running software 19.0.M0.60828, where crafted length fields in OSPF packet headers can cause the OSPF process to restart, leading to a denial of service. The vulnerability stems from improper validation of OSPF header length fields in the device’s OSPF...

CVE-2015-6256

Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service OSPF process restart via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820...

Cisco Aggregation Services Router ASR 5000 and ASR 5500 OSPF Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First OSPF protocol implementation of the Cisco Aggregation Services Router ASR 5000 and ASR 5500 System Software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition because the OSPF process restarts. The...

Cisco ASR 5000 Router GTPv2 Input Authentication Denial of Service Vulnerability

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability in the Cisco ASR 5000 Router allows a remote attacker to submit a special GTPv2 message to trigger an input validation error on the target...

CVE-2015-4275

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534...

Command injection

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534...

CVE-2015-4275

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 18.0.0.59167 and 18.0.0.59211 allows remote attackers to cause a denial of service via a malformed header in a GTPv2 packet, aka Bug ID CSCut11534...

CVE-2015-4275

CVE-2015-4275 affects the Cisco Packet Data Network Gateway (PGW) on Cisco ASR 5000 devices, specifically software 18.0.0.59167 and 18.0.0.59211. The vulnerability stems from lack of input validation in GTPv2 packet headers, allowing remote attackers to trigger a denial of service and partial ava...

Cisco ASR Arbitrary Linux Command Execution Vulnerability

The Cisco ASR 5000 and 5500 devices are Cisco's 5000 series of wireless controller products. The boot implementation of the Cisco ASR 5000 and 5500 devices failed to properly read the local file in the COMPACT FLASH, allowing an attacker logged in with administrator privileges to submit special...

CVE-2015-4273

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 15.0912, 15.0935, and 15.0938 allows remote attackers to cause a denial of service Session Manager outage via malformed fields in an IP packet, aka Bug ID CSCut38476...

Design/Logic Flaw

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 15.0912, 15.0935, and 15.0938 allows remote attackers to cause a denial of service Session Manager outage via malformed fields in an IP packet, aka Bug ID CSCut38476...

CVE-2015-4273

The Packet Data Network Gateway aka PGW component on Cisco ASR 5000 devices with software 15.0912, 15.0935, and 15.0938 allows remote attackers to cause a denial of service Session Manager outage via malformed fields in an IP packet, aka Bug ID CSCut38476...

CVE-2015-4273

CVE-2015-4273 affects the Cisco ASR 5000 Series Packet Data Network Gateway (PGW) IP stack. The vulnerability arises from improper input validation of certain fields in IP packets, allowing remote, unauthenticated attackers to cause a denial of service, specifically a Session Manager outage, on d...

Design/Logic Flaw

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...

CVE-2015-4244

The boot implementation on Cisco ASR 5000 and 5500 devices with software 14.0 allows local users to execute arbitrary Linux commands by leveraging administrative privileges for storage of these commands in a Compact Flash CF file, aka Bug ID CSCuu75278...