PT-2015-4810

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.12SG4 Description A denial of service issue exists due to an unspecified condition during SNMP polling of an affected device configured for Virtual Switching System VSS with only one switch in the VSS cluster. This allows...

Cisco IOS XR IPv6 Extension Header DoS (cisco-sa-20150220-ipv6)

The remote Cisco IOS XR device is affected by a denial of service vulnerability due to improper processing of malformed IPv6 packets carrying extension headers. A remote attacker, using a specially crafted packet, can cause a reload of the line card, resulting in a denial of service condition...

PT-2015-4808

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions prior to 3.7.5S on ASR 1000 devices Description The issue is related to improper handling of route adjacencies, which can be exploited by sending crafted IP packets to cause a denial of service device hang. An attacker...

Cisco IOS Malformed IKEv2 Message Processing Denial of Service Vulnerability (CNVD-2015-02087)

Cisco IOS is a popular Internet operating system. A security vulnerability exists in Cisco IOS and Cisco IOS XE that allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks by sending specially crafted IKEv2 messages over IPv4 or IPv6...

Cisco IOS CIP UDP Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. Cisco IOS has a security vulnerability that allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks via specially crafted UDP messages over the CIP protocol...

Cisco IOS/IOS XE Malformed ANRA Answer Message Restriction Bypass Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A security vulnerability exists in the Cisco IOS and Cisco IOS XE ANI implementations, which allows remote attackers to exploit the vulnerability to bypass device and node access notifications by sending spoofed ANRA response message telegrams or...

Cisco IOS XE IPv6 Message Handling Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. Cisco IOS XE has a security vulnerability that allows remote attackers to exploit the vulnerability to conduct denial of service attacks via specially crafted IPv6 messages...

Cisco IOS XR DHCPv4 Server Denial of Service Vulnerability

Cisco IOS XR is a member of the Cisco IOS software family and uses a microkernel-based distribution operating system architecture. A security vulnerability in the Cisco IOS XR DHCPv4 server on ASR 9000 devices allows remote attackers to exploit the vulnerability to conduct denial-of-service attac...

Cisco IOS XE AppNav Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A security vulnerability in Cisco IOS XE AppNav allows remote attackers to exploit the vulnerability to conduct denial of service attacks via specially crafted TCP messages...

Cisco IOS Memory Disclosure Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. Cisco IOS has a memory leak security vulnerability that allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks via specially crafted TCP messages over the CIP protocol...

Cisco IOS TCP Message Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. Cisco IOS has a security vulnerability that allows remote attackers to exploit the vulnerability to conduct denial-of-service attacks via specially crafted TCP messages over the CIP protocol...

CVE-2015-0650

The Service Discovery Gateway aka mDNS Gateway in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS before 3.10.4S, 3.11.xS before 3.11.3S, 3.12.xS before 3.12.2S, and 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service device reload by...

CVE-2015-0646

Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S allows remote attackers to cause a denial of service memory consumption or device reload by...

CVE-2015-0643

Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service memory consumption and device reload by...

CVE-2015-0642

Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service device reload by sending malformed IKEv2...

CVE-2015-0638

Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service interface queue wedge via crafted ICMPv4 packets, aka Bug ID CSCsi02145...

CVE-2015-0636

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service disrupted domain access via spoofed AN messages that reset a finite state machine,...

Design/Logic Flaw

Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service memory consumption and device reload by...

Code injection

Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via crafted IPv6 packets, aka Bug ID CSCub68073...

Design/Logic Flaw

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service disrupted domain access via spoofed AN messages that reset a finite state machine,...