PT-2014-5169

Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Cisco switches affected versions not specified Description The issue is related to the Link Layer Discovery Protocol LLDP implementation, which allows remote attackers to cause a denial of service devi...

PT-2014-5165

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.5E Description A vulnerability in the SNMP module could allow an authenticated, remote attacker to cause a reload of the affected device by sending continuous SNMP polling requests, exploiting the issue of frequent...

PT-2014-5164

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.24M4 Description A vulnerability in handling Real-Time Control Protocol RTCP traffic could allow an unauthenticated, remote attacker to cause traffic that is destined to an affected device and traffic that needs to be...

Design/Logic Flaw

The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.33S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service CEF outage and packet drops via malformed messages, aka Bug ID CSCun73782...

Design/Logic Flaw

The ScanSafe module in Cisco IOS 15.33M allows remote attackers to cause a denial of service device reload via HTTPS packets that require tower processing, aka Bug ID CSCum97038...

CVE-2014-3263

The ScanSafe module in Cisco IOS 15.33M allows remote attackers to cause a denial of service device reload via HTTPS packets that require tower processing, aka Bug ID CSCum97038...

CVE-2014-3262: Improper Input Validation

The Locator/ID Separation Protocol LISP implementation in Cisco IOS 15.33S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service CEF outage and packet drops via malformed messages, aka Bug ID CSCun73782...

CVE-2014-3263: Improper Input Validation

The ScanSafe module in Cisco IOS 15.33M allows remote attackers to cause a denial of service device reload via HTTPS packets that require tower processing, aka Bug ID CSCum97038...

PT-2014-5158

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.33S and earlier Cisco IOS XE affected versions not specified Description The Locator/ID Separation Protocol LISP implementation does not properly validate parameters in ITR control messages, allowing remote attackers to...

PT-2014-5159

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.33M Description A vulnerability in the content scanning module of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of the affected device. The issue occurs when processing HTTPS packets...

Cisco IOS XE VSS / BDF Traffic DoS (CSCug41049 / CSCue61890)

The remote Cisco device is affected by a denial of service vulnerability in its packet driver code when handling Virtual Switching Systems VSS or Bidirectional Forwarding Detection BFD traffic. An unauthenticated, adjacent attacker can exploit this to cause a device reload. Note that this issue...

CVE-2014-2183

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

CVE-2014-2183: Improper Input Validation

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

PT-2014-4540

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.10S.2 and earlier Description A vulnerability in the Layer 2 Tunneling Protocol L2TP module allows remote authenticated users to cause a denial of service via a malformed L2TP packet. The vulnerability occurs during the...

PT-2014-2274

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 15.32S Description The issue allows remote attackers to bypass interface ACL restrictions under certain circumstances by sending IPv6 packets. This occurs in a scenario where expected packet drops do not happen for ...

CVE-2012-3946: Undefined Security Weakness

Cisco IOS before 15.32S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682...

CVE-2012-5014

Cisco IOS before 15.12SY allows remote authenticated users to cause a denial of service device crash by establishing an SSH session from a client and then placing this client into a 1 slow or 2 idle state, aka Bug ID CSCto87436...

CVE-2012-5039

The BGP Router process in Cisco IOS before 12.250SY1 allows remote attackers to cause a denial of service memory consumption via vectors involving BGP path attributes, aka Bug ID CSCsw63003...

CVE-2012-4638

Cisco IOS before 15.11SY allows local users to cause a denial of service device reload by establishing an outbound SSH session, aka Bug ID CSCto00318...

CVE-2012-5422

Unspecified vulnerability in Cisco IOS before 15.32T on AS5400 devices allows remote authenticated users to cause a denial of service spurious errors via unknown vectors, aka Bug ID CSCub61009...