PT-2015-4751

Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description The issue arises from the Authentication Proxy feature in Cisco IOS not properly handling invalid AAA return codes from RADIUS and TACACS+ servers. This allows remote attackers to bypass...

Cisco IOS XR GNU C Library (glibc) Buffer Overflow (GHOST)

The remote Cisco device is running a version of Cisco IOS XR software that is potentially affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validated user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2 functions. Th...

Cisco IOS Software Security Bypass Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security bypass vulnerability exists in Cisco IOS Software, which can be exploited by an attacker to bypass authentication mechanisms and perform unauthorized operations...

CVE-2015-0632

Race condition in the Neighbor Discovery ND protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local network, aka Bug ID CSCuo67770...

CVE-2015-0632: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Neighbor Discovery ND protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local network, aka Bug ID CSCuo67770...

PT-2015-4772

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE affected versions not specified Description A race condition in the Neighbor Discovery protocol implementation allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local...

Cisco IPv6 Denial of Service Vulnerability

Cisco has identified a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service condition. The vulnerability is due to improper processing of malformed IPv6 packets carrying extension headers. Cisco Network Convergence System 6000 NCS 6000 and Cisco Carrier...

Code injection

Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System NCS 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X CRS-X devices allows remote attackers to cause a denial of service line-card reload via malformed IPv6 packets with extension headers, aka Bug ID CSCuq95241...

CVE-2015-0618: Undefined Security Weakness

Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System NCS 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X CRS-X devices allows remote attackers to cause a denial of service line-card reload via malformed IPv6 packets with extension headers, aka Bug ID CSCuq95241...

Cisco IOS XR Software IPv6 Malformed Packet Denial of Service Vulnerability

A vulnerability in the parsing of malformed IP version 6 IPv6 packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 NCS 6000 and Cisco Carrier Routing System CRS-X could allow an unauthenticated, remote attacker to cause a reload of a line card that is processing traffic. The...

PT-2015-4762

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.0.1 through 5.2.1 on Network Convergence System NCS 6000 devices Cisco IOS XR versions 5.1.3 through 5.1.4 on Carrier Routing System X CRS-X devices Description The issue allows remote attackers to cause a denial of...

CVE-2015-0609

Race condition in the Common Classification Engine CCE in the Measurement, Aggregation, and Correlation Engine MACE implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers improper handling of the...

Race condition

Race condition in the Common Classification Engine CCE in the Measurement, Aggregation, and Correlation Engine MACE implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers improper handling of the...

CVE-2015-0609: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Common Classification Engine CCE in the Measurement, Aggregation, and Correlation Engine MACE implementation in Cisco IOS 15.42T3 and earlier allows remote attackers to cause a denial of service device reload via crafted network traffic that triggers improper handling of the...

Cross site scripting

The Zone-Based Firewall implementation in Cisco IOS 12.4122T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service device reload via crafted network traffic, aka Bug ID CSCul65003...

CVE-2015-0593: Undefined Security Weakness

The Zone-Based Firewall implementation in Cisco IOS 12.4122T and earlier does not properly manage session-object structures, which allows remote attackers to cause a denial of service device reload via crafted network traffic, aka Bug ID CSCul65003...

PT-2015-4737

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.4122T Description The issue is related to the Zone-Based Firewall implementation, which does not properly manage session-object structures. This allows remote attackers to cause a denial of service, resulting in ...

CVE-2015-0610

Race condition in the object-group ACL feature in Cisco IOS 15.52T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding CEF switching, aka Bug ID...

CVE-2015-0606

The IOS Shell in Cisco IOS allows local users to cause a denial of service device crash via unspecified commands, aka Bug ID CSCur59696...

Race condition

Race condition in the object-group ACL feature in Cisco IOS 15.52T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding CEF switching, aka Bug ID...