CVE-2015-4293: Undefined Security Weakness

The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service CPU consumption or packet loss via fragmented 1 IPv4 or 2 IPv6 packets that trigger ATTN-3-SYNCTIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957...

Cisco IOS Software TFTP DoS (cisco-sa-20150722-tftp)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a denial of service vulnerability in the TFTP server functionality due to incorrect management of memory when handling TFTP requests. A remote, unauthenticated attacker can exploit this by...

PT-2015-6506

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.13S and earlier Description The issue is related to the packet-reassembly implementation, which allows remote attackers to cause a denial of service CPU consumption or packet loss via fragmented IPv4 or IPv6 packets. Th...

Cisco IOS DoS

DoS in TFTP server...

CVE-2015-0681

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

Design/Logic Flaw

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

CVE-2015-0681

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

CVE-2015-0681: Undefined Security Weakness

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

CVE-2015-4285

The Local Packet Transport Services LPTS implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service resource...

Design/Logic Flaw

The Local Packet Transport Services LPTS implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service resource...

CVE-2015-4285: Undefined Security Weakness

The Local Packet Transport Services LPTS implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect decisions about the opening of TCP and UDP ports during the processing of flow base entries, which allows remote attackers to cause a denial of service resource...

Command injection

The Concurrent Data Management Replication process in Cisco IOS XR 5.3.0 on ASR 9000 devices allows remote attackers to cause a denial of service BGP process reload via malformed BGPv4 packets, aka Bug ID CSCur70670...

CVE-2015-4284

The Concurrent Data Management Replication process in Cisco IOS XR 5.3.0 on ASR 9000 devices allows remote attackers to cause a denial of service BGP process reload via malformed BGPv4 packets, aka Bug ID CSCur70670...

PT-2015-4804

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 Cisco IOS XE versions 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S Cisco IOS XE versions...

CVE-2015-4284: Improper Input Validation

The Concurrent Data Management Replication process in Cisco IOS XR 5.3.0 on ASR 9000 devices allows remote attackers to cause a denial of service BGP process reload via malformed BGPv4 packets, aka Bug ID CSCur70670...

PT-2015-1680

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1.2 through 5.2.2 Description The issue is related to errors in resource management in the Local Packet Transport Services LPTS implementation. It allows a remote attacker to cause a denial of service by continuously...

PT-2015-1679

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.3.0 Description The issue is related to the Concurrent Data Management Replication process, which allows remote attackers to cause a denial of service by reloading the BGP process via malformed BGPv4 packets. This is due...

Cisco IOS DoS

The vulnerability of the telnetd subsystem in the Cisco IOS operating system is related to resource management errors. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially crafted telnet packet...

Cisco IOS DoS

The vulnerability of the PRE module in the Cisco IOS operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a malicious actor to cause service failure by initiating frequent connections to devices via the IPv6 protocol...

Design/Logic Flaw

The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service device reload by sending malformed PPPoE Active Discovery Request PADR packets on the local network, aka Bug ID CSCty94202...