Cisco ASR 1000 Series Aggregation Services Routers Fragmented Packet Denial of Service Vulnerability

A vulnerability in the code handling the reassembly of fragmented IP version 4 IPv4 or IP version 6 IPv6 packets of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a crash of the Embedded Services Processor ESP...

Cisco IOS Software TFTP DoS (cisco-sa-20150722-tftp)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the TFTP server functionality due to incorrect management of memory when handling TFTP requests. A remote, unauthenticated attacker can exploit this by...

Cisco IOS DoS

DoS in TFTP server...

Design/Logic Flaw

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

CVE-2015-0681

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

CVE-2015-0681

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

Design/Logic Flaw

The Local Packet Transport Services LPTS implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service resource...

CVE-2015-4285

The Local Packet Transport Services LPTS implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service resource...

Command injection

The Concurrent Data Management Replication process in Cisco IOS XR 5.3.0 on ASR 9000 devices allows remote attackers to cause a denial of service BGP process reload via malformed BGPv4 packets, aka Bug ID CSCur70670...

CVE-2015-4284

The Concurrent Data Management Replication process in Cisco IOS XR 5.3.0 on ASR 9000 devices allows remote attackers to cause a denial of service BGP process reload via malformed BGPv4 packets, aka Bug ID CSCur70670...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the telnetd subsystem in the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially crafted telnet packet...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the PRE module in the Cisco IOS operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to cause service failure by initiating frequent connections to devices via the IPv6 protocol...

Design/Logic Flaw

The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service device reload by sending malformed PPPoE Active Discovery Request PADR packets on the local network, aka Bug ID CSCty94202...

Cisco IOS Software UBR Devices IPv6 to IPv4 Subsystem Competition Condition Vulnerability

Cisco IOS on uBR devices is a set of operating systems from Cisco that run in uBR routers. A contention condition vulnerability exists in the IPv6-to-IPv4 subsystem in Cisco IOS version 15.3S on Cisco UBR devices. A remote attacker could exploit this vulnerability to cause a denial of service nul...

Race condition

Race condition in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine PRE module on UBR devices allows remote attackers to cause a denial of service NULL pointer free and module crash by triggering intermittent connectivity with many IPv6 CPE devices, aka Bug ID...

Cisco IOS XR Denial of Service Vulnerability (CNVD-2015-04082)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability exists in Cisco IOS XR version 5.1.3, which can be exploited by remote attackers to cause a denial of service process reloading via constructed MPLS LDP...

Race condition

Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine PRE module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service PXF process crash by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396...

CVE-2015-4203

Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine PRE module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN are configured, allows remote attackers to cause a denial of service PXF process crash by sending malformed MPLS 6VPE packets quickly, aka Bug ID CSCud83396...

Memory corruption

Memory leak in Cisco IOS 12.2 in the Performance Routing Engine PRE module on uBR10000 devices allows remote authenticated users to cause a denial of service memory consumption or PXF process crash by sending docsIfMCmtsMib SNMP requests quickly, aka Bug ID CSCue65051...

Memory corruption

Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine PRE module on UBR devices allows remote attackers to cause a denial of service memory consumption by triggering an error during CPE negotiation, aka Bug ID CSCug00885...