6768 matches found
CVE-2012-0360
Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...
Code injection
Unspecified vulnerability in Cisco IOS before 15.32T on AS5400 devices allows remote authenticated users to cause a denial of service spurious errors via unknown vectors, aka Bug ID CSCub61009...
Design/Logic Flaw
The ACL implementation in Cisco IOS before 15.11SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service device reload via a "no object-group" command followed by an object-group command, aka Bug ID CSCts16133...
Memory corruption
Memory leak in Cisco IOS before 15.11SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service memory consumption via crafted packets, aka Bug ID CSCtn22376...
Design/Logic Flaw
The BGP Router process in Cisco IOS before 12.250SY1 allows remote attackers to cause a denial of service memory consumption via vectors involving BGP path attributes, aka Bug ID CSCsw63003...
Authentication flaw
The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...
Code injection
Cisco IOS before 15.32T, when scansafe is enabled, allows remote attackers to cause a denial of service latency via SYN packets that are not accompanied by SYN-ACK packets from the Scan Safe Tower, aka Bug ID CSCub85451...
Code injection
Cisco IOS before 12.250SY1 allows remote authenticated users to cause a denial of service memory consumption via a sequence of VTY management sessions aka exec sessions, aka Bug ID CSCtn43662...
Design/Logic Flaw
Cisco IOS before 15.11SY allows local users to cause a denial of service device reload by establishing an outbound SSH session, aka Bug ID CSCto00318...
Design/Logic Flaw
Cisco IOS Unified Border Element CUBE in Cisco IOS before 15.32T allows remote authenticated users to cause a denial of service input queue wedge via a crafted series of RTCP packets, aka Bug ID CSCuc42518...
Information disclosure
The multicast implementation in Cisco IOS before 15.11SY allows remote attackers to cause a denial of service Route Processor crash by sending packets at a high rate, aka Bug ID CSCts37717...
CVE-2012-5422
The CVE-2012-5422 entry describes an unspecified vulnerability in Cisco IOS on AS5400 devices, with versions before 15.3(2)T, that allows remote authenticated users to cause a denial of service (spurious errors) via unknown vectors (Bug ID CSCub61009). Affected product: Cisco IOS on AS5400 system...
CVE-2012-5032
The CVE-2012-5032 issue affects Cisco IOS with the Flex-VPN load-balancing feature in the ipsec-ikev2 implementation prior to 15.1(1)SY3. The root cause is that this feature does not require authentication, enabling an attacker to cause VPN traffic to be forwarded to an attacker-controlled destin...
CVE-2012-5017
CVE-2012-5017 affects Cisco IOS before 15.1(1)SY1. The issue arises in the VPN/IKEv2 processing where remote authenticated users can trigger a denial of service (device reload) by establishing a VPN session and sending malformed IKEv2 packets. Connected documents confirm the vulnerable condition,...
CVE-2012-4651
CVE-2012-4651 concerns Cisco IOS prior to 15.3(2)T when ScanSafe is enabled. The vulnerability allows remote attackers to cause a denial of service (latency) by sending SYN packets that are not followed by SYN-ACKs from the Scan Safe Tower. The root cause is tied to how ScanSafe handles certain T...
CVE-2012-5032
The Flex-VPN load-balancing feature in the ipsec-ikev2 implementation in Cisco IOS before 15.11SY3 does not require authentication, which allows remote attackers to trigger the forwarding of VPN traffic to an attacker-controlled destination, or the discarding of this traffic, by arranging for an...
CVE-2012-5037
CVE-2012-5037 affects Cisco IOS before 15.1(1)SY on Catalyst 6500/7600. The vulnerability arises in the ACL implementation, where a local attacker can trigger a denial of service (device reload) by executing a sequence: a no object-group command followed by an object-group command (Bug ID CSCts16...
CVE-2012-4638
Cisco IOS before 15.11SY allows local users to cause a denial of service device reload by establishing an outbound SSH session, aka Bug ID CSCto00318...