Cisco Catalyst Switches Network Mobility Services Protocol Port Information Disclosure Vulnerability (cisco-sa-20160413-nms)

Cisco Catalyst Switches running Cisco IOS Software releases may allow an unauthenticated, remote attacker to retrieve version information about the software release running on the device by accessing the Network Mobility Services Protocol NMSP port. SPDX-FileCopyrightText: 2016 Greenbone AG Some...

CVE-2016-6355

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service control-plane protocol outage via crafted fragmented packets, aka Bug ID CSCux26791...

Memory corruption

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service control-plane protocol outage via crafted fragmented packets, aka Bug ID CSCux26791...

CVE-2016-6355

Cisco IOS XR vulnerability CVE-2016-6355 affects ASR 9001 devices, where memory leaks in the driver processing of incoming fragmented packets can cause a denial of service by dropping all control-plane protocols. Affected releases include IOS XR 5.1.x up to 5.1.3, 5.2.x up to 5.2.5, and 5.3.x up ...

Cisco IOS XR 5.1.x < 5.1.3 / 5.2.x < 5.2.4 / 5.3.x < 5.3.2 Fragmented Packet DoS (cisco-sa-20160810-iosxr)

The remote Cisco device is running a version of Cisco IOS XR that is 5.1.x prior to 5.1.3, 5.2.x prior to 5.2.4, or 5.3.x prior to 5.3.2. It is, therefore, affected by a denial of service vulnerability in the driver processing functions due to improper processing of fragmented packets. An...

Cisco IOS Denial of Service Vulnerability (CNVD-2016-06186)

Cisco IOS is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in Cisco IOS, which arises from the program's failure to properly handle invalid NTP packets. A remote attacker could exploit this vulnerability by sending a large number of...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure memory consumption by using specially created TCP packets sent to the SSH port...

Cisco IOS XR Native OS Command Injection Vulnerability

Cisco IOS XR is the United States Cisco Cisco company's IOS software series in a fully modular, distributed network interconnection operating system. A security vulnerability exists in the CLI in Cisco IOS XR versions 6.x through 6.0.1. A local attacker could exploit the vulnerability to execute...

Code injection

Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service device reload via crafted attributes in a BGP message, aka Bug ID CSCuz21061...

CVE-2016-1456

The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access, aka Bug ID CSCuz62721...

CVE-2016-1456

The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access, aka Bug ID CSCuz62721...

Cisco IOS XR Software Command Injection Vulnerability

A vulnerability in the command-line utility of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with elevated privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in two products. Exploitation of one of these vulnerabilities could allow an unauthenticated remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security...

Cisco IOS XR for NCS 6000 Packet Timer Leak Denial of Service Vulnerability

A vulnerability in the management of system timer resources in Cisco IOS XR for Cisco Network Convergence System 6000 NCS 6000 Series Routers could allow an unauthenticated, remote attacker to cause a leak of system timer resources, leading to a nonoperational state and an eventual reload of the...

The vulnerability of the Cisco IOS operating system allows a malicious individual to establish a network connection using the TELNET protocol.

The Cisco IOS operating system of telecommunications equipment does not recognize the keyword “vrf-also” during the execution of the “access-class” command. This allows a malicious intruder to establish a network connection using the TELNET protocol...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a “disconnection”

Cisco IOS software contains a vulnerability in the NAT service, which allows a remote attacker to trigger a memory leak and a “disruption of service” by sending a sequence of TCP packets...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains numerous implementation errors in the Session Initiation Protocol SIP. When these errors are exploited during operation, a fault with ID CSCth03022 can be triggered, along with a “service failure” of the router...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains vulnerabilities in the Secure Shell SSH services and Cisco IOS XE software. When these services are operated, a “disruption of service” can be triggered by sending specially crafted SSH requests...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

The Network Address Translation NAT service of Cisco IOS software contains a vulnerability that allows a remote attacker to trigger a “service denial” by sending specially crafted SIP packets...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a “disconnection”

Cisco IOS software contains a vulnerability in the Resource Reservation Protocol RSVP, which allows a malicious attacker to trigger a “service failure” by sending specially crafted UDP RSVP packets...