CVE-2015-6270

Cisco IOS XE before 2.2.3 on ASR 1000 devices is affected by CVE-2015-6270. A crafted IPv6 packet can remotely trigger a denial of service by crashing the Embedded Services Processor (ESP). This vulnerability is tied to Bug ID CSCsv98555. The available documents specify affected software (Cisco I...

CVE-2015-6270

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv6 packet, aka Bug ID CSCsv98555...

CVE-2015-6273

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

CVE-2015-6268

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482...

Command injection

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496...

CVE-2015-6267

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted L2TP packet, aka Bug IDs CSCsw95722 and CSCsw95496...

Code injection

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482...

Code injection

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

CVE-2015-6267

Cisco IOS XE before 2.2.3 on ASR 1000 devices is affected by CVE-2015-6267 due to a vulnerability in L2TP processing that can trigger an Embedded Services Processor crash, leading to a denial of service. The issue is triggered by a crafted L2TP packet. Affected product is the Cisco ASR 1000 serie...

CVE-2015-6268

Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted IPv4 UDP packet, aka Bug ID CSCsw95482...

CVE-2015-6273

Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly VFR by certain firewall and NAT components, which allows remote attackers to cause a denial of service Embedded Services Processor crash via crafted IP packets, aka Bug IDs CSCtf87624,...

CVE-2015-6273

Cisco IOS XE on ASR 1000 devices (pre-3.1.2S) is affected by a vulnerability in the automatic setup of Virtual Fragment Reassembly (VFR) handled by certain firewall and NAT components. The root cause is mishandling of VFR setup, which can be triggered by crafted IP packets, allowing a remote atta...

CVE-2015-6268

Cisco IOS XE before 2.2.3 on ASR 1000 devices is affected by CVE-2015-6268. The issue allows remote attackers to cause a denial of service by sending a crafted IPv4 UDP packet, triggering an Embedded Services Processor (ESP) crash and potentially a device reload. Root cause is tied to UDP packet ...

Cisco ASR 1000 Series Router IOS XE VFR Denial of Service Vulnerability

The Cisco ASR1000 Series Aggregation Services Routers provide a WAN edge solution that integrates information, communication, collaboration, and commerce. The Cisco ASR 1000 Series Router has a security vulnerability in the processing of IP messages that allows a remote attacker to exploit the...

CVE-2015-4291

Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted series of fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCtd72617...

Code injection

Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted series of fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCtd72617...

CVE-2015-4291

CVE-2015-4291 affects Cisco IOS XE Software on ASR 1000 Series (2.x before 2.4.3 and 2.5.x before 2.5.1). The vulnerability lies in the ESP’s handling of fragmented IPv4/IPv6 packets, where crafted fragmentation can cause the Embedded Services Processor to crash. Impact observed as a denial of se...

CVE-2015-4291

Cisco IOS XE 2.x before 2.4.3 and 2.5.x before 2.5.1 on ASR 1000 devices allows remote attackers to cause a denial of service Embedded Services Processor crash via a crafted series of fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCtd72617...

Cisco ASR 1000 Series Aggregation Services Routers Fragmented Packet Denial of Service Vulnerability

A vulnerability in the code handling the reassembly of fragmented IP version 4 IPv4 or IP version 6 IPv6 packets of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a crash of the Embedded Services Processor ESP...

Cisco Fixes DoS Vulnerability in ASR 1000 Routers

Cisco has patched a denial-of-service vulnerability in its ASR 1000 line of routers, a bug that’s caused by an issue with the way the routers handle some fragmented packets. The company said the DoS vulnerability affects all of the ASR 1000 Series Aggregation Services Routers that are running a...