Cisco IOS XR IPv6 ipv6_io Service Handling Denial of Service Vulnerability

Cisco IOS XR is a member of the Cisco IOS software family and uses a microkernel-based distribution operating system architecture. A security vulnerability exists in Cisco IOS XR's handling of IPv6 messages, which allows remote attackers to exploit the vulnerability by sending a special request t...

PT-2015-1413

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2SCH Description The issue is caused by a race condition in the Performance Routing Engine PRE module when NetFlow and an MPLS IPv6 VPN are configured. This allows remote attackers to cause a denial of service PXF process...

PT-2015-1415

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.3.1 Description The issue is related to errors in resource management, allowing a remote attacker to cause a denial of service by sending crafted IEEE 802.3x flow-control PAUSE frames. This can lead to a Network Processi...

Code injection

Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems CMTS does not properly restrict access to the IP Detail Record IPDR service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID...

CVE-2015-4202

CVE-2015-4202 affects Cisco uBR10000 CMTS IPDR service. The issue arises from insufficient access control, allowing unauthenticated remote attackers to request IPDR data and obtain MAC addresses and limited network-utilization information. Root cause is the IPDR ACLs not properly restricting acce...

CVE-2015-4202: Exposure of Sensitive Information to an Unauthorized Actor

Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems CMTS does not properly restrict access to the IP Detail Record IPDR service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID...

PT-2015-1412

Name of the Vulnerable Software and Affected Versions Cisco IOS version 12.2SCH on uBR10000 router Cable Modem Termination Systems CMTS Description The issue concerns the Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems CMTS not properly restricting access to the IP Detail...

CVE-2015-4191

Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service ipv6io service reload via a malformed IPv6 packet, aka Bug ID CSCuq95565...

Code injection

Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service ipv6io service reload via a malformed IPv6 packet, aka Bug ID CSCuq95565...

CVE-2015-4195: Undefined Security Weakness

Cisco IOS XR 5.1.1.K9SEC allows remote authenticated users to cause a denial of service vty error, and SSH and TELNET outage via a crafted disconnect action within an SSH session, aka Bug ID CSCul63127...

CVE-2015-4191: Undefined Security Weakness

Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service ipv6io service reload via a malformed IPv6 packet, aka Bug ID CSCuq95565...

Cisco IOS XR Software Crafted IPv6 Packet DoS (cisco-sa-20150611-iosxr)

The remote Cisco IOS XR device is affected by a denial of service vulnerability due to improper processing of IPv6 packets carrying extension headers that are otherwise valid but are unlikely to occur during normal operation. A remote attacker, using a specially crafted packet, can cause a reload...

PT-2015-6452

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.1.1.K9SEC Description A denial of service condition can be caused by an authenticated, remote attacker via a crafted disconnect action within an SSH session. The vulnerability occurs due to an error when an SSH connectio...

Cisco Network Convergence System 6000 IOS XR Denial of Service Vulnerability

Cisco IOS XR on Network Convergence System 6000 devices is the United States of America Cisco Cisco company's set of routing equipment running in the provision of special network functions in a fully modular, distributed network operating system. A security vulnerability exists in the telnetd...

PT-2015-6450

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.2.1 Description A vulnerability in IP version 6 IPv6 processing could allow an unauthenticated, remote attacker to cause a reload of the ipv6 io service. The issue is due to improper processing of a malformed IPv6 packet...

Cisco IOS XR

Crash on IPv6 packet processing...

CVE-2015-4185: Undefined Security Weakness

The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privileges by starting a session very soon after a TCL script execution, aka Bug ID CSCuq24202...

CVE-2015-0776

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

Design/Logic Flaw

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

CVE-2015-0776

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...