CVE-2014-3290

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867...

CVE-2014-2176: Undefined Security Weakness

Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service NP chip and line card reload via malformed IPv6 packets, aka Bug ID CSCun71928...

CVE-2014-3290: Undefined Security Weakness

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867...

PT-2014-5185

Name of the Vulnerable Software and Affected Versions Cisco IOS XE version 3.12S Description The issue arises from the mDNS implementation not properly interacting with autonomic networking. This allows remote attackers to obtain sensitive networking-services information by sniffing the network o...

Cisco IOS XR DoS

DoS via IPv6 packet...

PT-2014-4533

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.1.2 through 5.1.1 Description A vulnerability in the parsing of malformed Internet Protocol version 6 IPv6 packets could allow an unauthenticated, remote attacker to cause a lockup and eventual reload of a Network...

Code injection

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service device reload via a malformed PPPoE packet, aka Bug ID CSCuo55180...

PT-2014-5180

Name of the Vulnerable Software and Affected Versions Cisco IOS XE on ASR1000 devices affected versions not specified Description The issue allows an unauthenticated, adjacent attacker to cause a reload of the affected device, leading to a denial of service DoS condition. This is due to improper...

CVE-2014-3284: Improper Input Validation

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service device reload via a malformed PPPoE packet, aka Bug ID CSCuo55180...

Code injection

The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service device reload via a malformed packet, aka Bug ID CSCum96282...

Design/Logic Flaw

The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service process hang via a malformed packet, aka Bug ID CSCul80924...

CVE-2014-3270

The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service process hang via a malformed packet, aka Bug ID CSCul80924...

CVE-2014-3273

The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service device reload via a malformed packet, aka Bug ID CSCum96282...

PT-2014-5166

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue is related to the DHCPv6 implementation, which allows remote attackers to cause a denial of service by sending a malformed packet. This is due to incorrect handling of such...

PT-2014-5167

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue is related to the DHCPv6 implementation, which allows remote attackers to cause a denial of service by sending a malformed packet. This is due to incorrect handling of such...

CVE-2014-3271: Improper Input Validation

The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service device crash via a malformed packet, aka Bug IDs CSCum85558, CSCum20949, CSCul61849, and CSCul71149...

CVE-2014-3273: Improper Input Validation

The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service device reload via a malformed packet, aka Bug ID CSCum96282...

CVE-2014-3270: Improper Input Validation

The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service process hang via a malformed packet, aka Bug ID CSCul80924...

CVE-2014-3268: Improper Input Validation

Cisco IOS 15.24M4 on Cisco Unified Border Element CUBE devices allows remote attackers to cause a denial of service input-queue consumption and traffic-processing outage via crafted RTCP packets, aka Bug ID CSCuj72215...

CVE-2014-3269: Improper Input Validation

The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service device reload by polling frequently, aka Bug ID CSCug65204...