CVE-2014-3361: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service device reload via multipart SDP IPv4 traffic, aka Bug ID CSCun54071...

CVE-2014-3360: Improper Neutralization of Special Elements used in an OS Command

Cisco IOS 12.4 and 15.0 through 15.4 and IOS XE 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allow remote attackers to cause a denial of service device reload via a crafted SIP message, aka Bug ID...

CVE-2014-3359: Undefined Security Weakness

Memory leak in Cisco IOS 15.1 through 15.4 and IOS XE 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allows remote attackers to cause a denial of service memory consumption or device reload via malformed DHCPv6 packets, aka B...

Cisco IOS Software DHCP Version 6 Denial of Service Vulnerability

A vulnerability in the DHCP version 6 DHCPv6 server implementation of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper parsing of malformed DHCPv6 packets. An attacker coul...

PT-2014-5252

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 and 15.0 through 15.4 Cisco IOS XE versions 3.1.xS through 3.7.xS before 3.7.6S Cisco IOS XE versions 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S Cisco IOS XE version 3.11.xS before 3.12S Description A vulnerability in t...

PT-2014-5249

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.4 Cisco IOS XE versions 3.3.xSE through 3.3.1SE Cisco IOS XE versions 3.3.xXO through 3.3.0XO Cisco IOS XE versions 3.5.xE through 3.5.1E Cisco IOS XE versions 3.11.xS through 3.11.0S Description The Cisco IO...

PT-2014-5251

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.4 Cisco IOS XE versions 3.4.xS through 3.7.xS before 3.7.6S Cisco IOS XE versions 3.8.xS through 3.10.xS before 3.10.1S Cisco IOS XE versions 3.11.xS before 3.12S Description A memory leak in the DHCP version...

PT-2014-5246

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 Cisco IOS XE versions 2.x and 3.x before 3.7.4S Cisco IOS XE versions 3.2.xSE and 3.3.xSE before 3.3.2SE Cisco IOS XE versions 3.3.xSG and 3.4.xSG before 3.4.4SG Cisco IOS XE...

PT-2014-5247

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.3 Cisco IOS XE versions 3.3.xXO before 3.3.1XO Cisco IOS XE versions 3.6.xS before 3.7.6S is not accurate, it should be versions 3.6.xS and 3.7.xS before 3.7.6S Corrected to: Cisco IOS XE versions 3.6.xS and...

PT-2014-5253

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.4 Description A vulnerability in the Network Address Translation NAT feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected...

PT-2014-5250

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.4 Cisco IOS XE versions 3.3.xSE through 3.3.1SE, 3.3.xXO through 3.3.0XO, 3.5.xE through 3.5.1E, and 3.11.xS through 3.11.0S Description The issue is related to a memory leak in the Cisco IOS Software...

PT-2014-5248

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.3 Cisco IOS XE versions 3.3.xXO before 3.3.1XO Cisco IOS XE versions 3.6.xS before 3.7.6S is not accurate, it should be versions 3.6.xS and 3.7.xS before 3.7.6S Corrected to: Cisco IOS XE versions 3.6.xS and...

CVE-2014-3378

tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed TACACS+ packet, aka Bug ID CSCum00468...

Code injection

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...

Code injection

Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed RSVP packet, aka Bug ID CSCuq12031...

CVE-2014-3379: Improper Input Validation

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3378: Improper Input Validation

tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed TACACS+ packet, aka Bug ID CSCum00468...

CVE-2014-3376: Improper Input Validation

Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed RSVP packet, aka Bug ID CSCuq12031...

CVE-2014-3377: Improper Input Validation

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...

PT-2014-5267

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier Description A vulnerability in the Simple Network Management Protocol SNMP version 2 processing of Cisco IOS XR allows an authenticated, remote attacker to cause a reload of the SNMP daemon snmpd process o...