CVE-2015-0659

CVE-2015-0659 concerns Cisco IOS Autonomic Networking Infrastructure (ANI). The ANI implementation allows remote attackers to trigger self-referential adjacencies by sending crafted Autonomic Networking (AN) messages (Bug ID CSCup62157). Affected: ANI component of Cisco IOS. Reported impact indic...

Cisco IOS and IOS XE RADIUS Implementation Denial of Service Vulnerability

Cisco IOS and IOS-XE are both operating systems developed by Cisco for its network devices. A security vulnerability exists in the RADIUS implementation of Cisco IOS and IOS XE. A remote attacker could exploit this vulnerability to cause a denial of service device reload with the help of speciall...

Cisco IOS XR SNMPv2 Implementation Denial of Service Vulnerability

Cisco IOS XR is the United States Cisco Cisco company's IOS software series of a fully modular, distributed network operating system. A security vulnerability exists in the Cisco IOS XR's Simple Network Management Protocol version 2 SNMPv2 processing. A remote attacker could exploit this...

Unspecified Vulnerability in Cisco IOS Authentication Proxy Function

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in the Authentication Proxy feature of Cisco IOS, which stems from the program's failure to properly handle invalid Authentication, Authorization, and Accounting AAA return codes originati...

Cisco IOS XR GNU C Library (glibc) Buffer Overflow (GHOST)

The remote Cisco device is running a version of Cisco IOS XR software that is potentially affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validated user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2 functions. Th...

Cisco IOS Software Security Bypass Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security bypass vulnerability exists in Cisco IOS Software, which can be exploited by an attacker to bypass authentication mechanisms and perform unauthorized operations...

CVE-2015-0632

Race condition in the Neighbor Discovery ND protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local network, aka Bug ID CSCuo67770...

Cisco IPv6 Denial of Service Vulnerability

Cisco has identified a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service condition. The vulnerability is due to improper processing of malformed IPv6 packets carrying extension headers. Cisco Network Convergence System 6000 NCS 6000 and Cisco Carrier...

Code injection

Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System NCS 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X CRS-X devices allows remote attackers to cause a denial of service line-card reload via malformed IPv6 packets with extension headers, aka Bug ID CSCuq95241...

Cisco IOS XR Software IPv6 Malformed Packet Denial of Service Vulnerability

A vulnerability in the parsing of malformed IP version 6 IPv6 packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 NCS 6000 and Cisco Carrier Routing System CRS-X could allow an unauthenticated, remote attacker to cause a reload of a line card that is processing traffic. The...

CVE-2015-0609

Race condition in the Common Classification Engine CCE in the Measurement, Aggregation, and Correlation Engine MACE implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers improper handling of the...

Race condition

Race condition in the Common Classification Engine CCE in the Measurement, Aggregation, and Correlation Engine MACE implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers improper handling of the...

Cross site scripting

The Zone-Based Firewall implementation in Cisco IOS 12.4122T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service device reload via crafted network traffic, aka Bug ID CSCul65003...

CVE-2015-0610

Race condition in the object-group ACL feature in Cisco IOS 15.52T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding CEF switching, aka Bug ID...

CVE-2015-0606

The IOS Shell in Cisco IOS allows local users to cause a denial of service device crash via unspecified commands, aka Bug ID CSCur59696...

Race condition

Race condition in the object-group ACL feature in Cisco IOS 15.52T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding CEF switching, aka Bug ID...

Command injection

The IOS Shell in Cisco IOS allows local users to cause a denial of service device crash via unspecified commands, aka Bug ID CSCur59696...

Cross site scripting

The Zone-Based Firewall implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers incorrect kernel-timer handling, aka Bug ID CSCuh25672...

CVE-2015-0610

Race condition in the object-group ACL feature in Cisco IOS 15.52T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding CEF switching, aka Bug ID...

CVE-2015-0606

The CVE-2015-0606 issue affects Cisco IOS, specifically the IOS Shell, where a vulnerability in processing IOS Shell commands allows an authenticated, local user to crash the device (Denial of Service) via unspecified commands (Bug ID CSCur59696). Impact is device crash leading to DoS; exploitati...