Cisco IOS XE Software Web User Interface Denial of Service Vulnerability

A vulnerability in the web user interface of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cisco IOS XE Software DHCP Client Denial of Service Vulnerability

A vulnerability in the DHCP client implementation of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Cisco IOS Software Layer 2 Tunneling Protocol Denial of Service Vulnerability (cisco-sa-20170322-l2tp)

A vulnerability in the Layer 2 Tunneling Protocol L2TP parsing function of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

Format string

A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a format string vulnerability when processing a crafted...

CVE-2017-3857

A vulnerability in the Layer 2 Tunneling Protocol L2TP parsing function of Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and Cisco IOS XE 3.1 through 3.18 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation...

CVE-2017-3864

A vulnerability in the DHCP client implementation of Cisco IOS 12.2, 12.4, and 15.0 through 15.6 and Cisco IOS XE 3.3 through 3.7 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability occurs during the parsing of a crafted DHCP packet. An...

Input validation

A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of HTTP parameters supplied by the user. An attacker could...

CVE-2017-3859

A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a format string vulnerability when processing a crafted...

CVE-2017-3857

CVE-2017-3857 is a DoS vulnerability in Cisco IOS (12.0–12.4, 15.0–15.6) and IOS XE (3.1–3.18) caused by improper validation in the Layer 2 Tunneling Protocol (L2TP) parsing function. An unauthenticated, remote attacker can send crafted L2TP packets to trigger a device reload when the L2TP featur...

CVE-2017-3856

A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient resource handling by the affected software when the web user interface is under a high load. A...

CVE-2017-3857: Uncontrolled Resource Consumption

A vulnerability in the Layer 2 Tunneling Protocol L2TP parsing function of Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and Cisco IOS XE 3.1 through 3.18 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient validation...

CVE-2017-3864: Undefined Security Weakness

A vulnerability in the DHCP client implementation of Cisco IOS 12.2, 12.4, and 15.0 through 15.6 and Cisco IOS XE 3.3 through 3.7 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability occurs during the parsing of a crafted DHCP packet. An...

CVE-2017-3858: Improper Input Validation

A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of HTTP parameters supplied by the user. An attacker could...

CVE-2017-3856: Uncontrolled Resource Consumption

A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient resource handling by the affected software when the web user interface is under a high load. A...

PT-2017-2017

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software version 16.2.1 Description A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability...

CVE-2017-3859: Use of Externally-Controlled Format String

A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a format string vulnerability when processing a crafted...

PT-2017-2018

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6 Cisco IOS XE versions 3.1 through 3.18 Description A vulnerability in the Layer 2 Tunneling Protocol L2TP parsing function exists due to insufficient validation of L2TP packets. This...

PT-2017-2019

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.1 through 3.17 Description A vulnerability in the web user interface of Cisco IOS XE could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to insufficient resour...

PT-2017-2015

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 12.4, and 15.0 through 15.6 Cisco IOS XE versions 3.3 through 3.7 Description A vulnerability in the DHCP client implementation could allow an unauthenticated, remote attacker to cause a denial of service DoS condition...

Input validation

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS Software possibly 15.2 through 15.6 and Cisco IOS XE Software possibly 3.7 through 3.18, and 16 could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The...