Cisco IOS XE Software AAA Login Denial of Service Vulnerability

A vulnerability in the Authentication, Authorization, and Accounting AAA service for remote Secure Shell Host SSH connections to the device for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the vulnerable device to reload. SPDX-FileCopyrightText: 2016 Greenbone AG...

Cisco IOS XE Software DNS Forwarder Denial of Service Vulnerability

A vulnerability in the DNS forwarder functionality of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, corrupt the information present in the device SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a...

Cisco IOS XE Software IP Fragment Reassembly Denial of Service Vulnerability

A vulnerability in the IPv4 fragment reassembly function of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...

Cisco IOS XE Software H.323 Message Validation Denial of Service Vulnerability

A vulnerability in the H.323 subsystem of Cisco IOS XE Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition on an affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

CiscoIOS XE Software Multicast Routing Denial of Service Vulnerabilities

Multiple vulnerabilities in the multicast subsystem of Cisco IOS XE Software could allow an unauthenticated, remote attacker to create a denial of service DoS condition. The issues are in IPv4 Multicast Source Discovery Protocol MSDP and IPv6 Protocol Independent Multicast PIM...

Cisco IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 1 IKEv1 fragmentation code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an exhaustion of available memory or a reload of the affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2016-08390)

Cisco IOS XE is an operating system developed by Cisco for its network devices.Network Address Translation NAT is one of the network address translation functions. A denial of service vulnerability exists in the implementation of the NAT feature in Cisco IOS XE Software. A remote attacker could...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08395)

Cisco IOS and IOS XE Software are operating systems developed by Cisco for its network devices.Internet Key Exchange version 1 IKEv1 Fragmentation is one of the protocols used to set up security associations SAs in the IPsec protocol suite. . A denial of service vulnerability exists in IKEv1...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08397)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices. A denial of service vulnerability exists in the H.323 subsystem in Cisco IOS and IOS XE Software, which arises from a program's failure to properly validate fields in the H.323 protocol group. A...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2016-08560)

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A denial of service vulnerability exists in the implementation of the Open Shortest Path First Link State Advertisement...

PT-2016-6863

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.2 through 15.6 Cisco IOS XE versions 3.6 through 3.17 and 16.1 Description Multiple vulnerabilities in the multicast subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to create a...

PT-2016-6868

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.3 Cisco IOS XE versions 3.1 through 3.9 Description Multiple vulnerabilities in the multicast subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to create a...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. Exploitation of one of these vulnerabilities could allow a remote attacker to take over an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and apply the...

PT-2016-6859

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.1 through 3.17 Cisco IOS XE versions 16.1 through 16.2 Description A vulnerability in the implementation of Network Address Translation NAT functionality could allow an unauthenticated, remote attacker to cause an...

PT-2016-6861

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 Cisco IOS versions 15.0 through 15.6 Cisco IOS XE versions 3.1 through 3.15 Description A flaw in the DNS forwarder functionality allows remote attackers to obtain sensitive information from process memory ...

PT-2016-6860

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 Cisco IOS XE versions 3.14 through 3.16 and 16.1 Description A vulnerability in the IP Detail Record IPDR code could allow an unauthenticated, remote attacker to cause an affected system to reload. The vulnerability is...

PT-2016-6864

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.6 Cisco IOS XE versions 3.1 through 3.17 and 16.2 Description A vulnerability in the H.323 subsystem could allow an unauthenticated, remote attacker to create a denial of service DoS...

PT-2016-6862

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 and 15.0 through 15.6 Cisco IOS XE versions 3.1 through 3.18 and 16.1 Description A vulnerability in the Internet Key Exchange version 1 IKEv1 fragmentation code could allow an unauthenticated, remote attacker to cause ...

PT-2016-6866

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.1 through 3.17 Cisco IOS XE version 16.1 on 64-bit platforms Description A vulnerability in the IPv4 fragment reassembly function could allow an unauthenticated, remote attacker to cause an affected device to reload due...

PT-2016-6895

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.2.2 Description A memory error in the Open Shortest Path First OSPF Link State Advertisement LSA functionality could allow an unauthenticated, remote attacker to cause a denial of service DoS condition by sending a craft...