Code injection

The SSL VPN aka WebVPN feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service memory consumption via crafted HTTP requests, aka Bug ID CSCuf51357...

CVE-2014-2108

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

CVE-2014-2109

The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...

CVE-2014-2111

The Application Layer Gateway ALG module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCue00996...

CVE-2014-2113

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service I/O memory consumption and device reload via a malformed IPv6 packet, aka Bug ID CSCui59540...

CVE-2014-2112

The SSL VPN aka WebVPN feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service memory consumption via crafted HTTP requests, aka Bug ID CSCuf51357...

CVE-2014-2109: Improper Input Validation

The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...

CVE-2014-2108: Improper Input Validation

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

CVE-2014-2113: Improper Input Validation

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service I/O memory consumption and device reload via a malformed IPv6 packet, aka Bug ID CSCui59540...

CVE-2014-2111: Improper Input Validation

The Application Layer Gateway ALG module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCue00996...

CVE-2014-2106: Improper Input Validation

Cisco IOS 15.3M before 15.33M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCug45898...

CVE-2014-2112: Improper Input Validation

The SSL VPN aka WebVPN feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service memory consumption via crafted HTTP requests, aka Bug ID CSCuf51357...

CVE-2014-2107: Improper Input Validation

Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service route switch processor outage via crafted IP packets, aka Bug ID CSCug84789...

PT-2014-1005

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 Cisco IOS versions 15.0 through 15.4 Description The TCP Input module in Cisco IOS, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP...

PT-2014-1319

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.3M before 15.33M2 Cisco IOS XE versions 3.10.xS before 3.10.2S Description A vulnerability in the Session Initiation Protocol SIP implementation allows an unauthenticated, remote attacker to cause a reload of an affected...

PT-2014-1318

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.3 Cisco IOS XE versions 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S Description The issue is related to the processing of malformed IKEv2 packets by the affected devices, which...

PT-2014-1320

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.3 Cisco IOS XE versions 3.3 and 3.5 before 3.5.2E Cisco IOS XE versions 3.7 before 3.7.5S Cisco IOS XE versions 3.8, 3.9, and 3.10 before 3.10.2S Description A vulnerability in the implementation of the IP...

PT-2014-1317

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.3 Description The issue allows remote attackers to cause a denial of service, specifically a route switch processor outage, via crafted IP packets. This is due to an issue in the Kailash...

PT-2014-1135

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 Cisco IOS versions 15.0 through 15.4 Description The Application Layer Gateway ALG module in Cisco IOS contains an issue that allows a remote attacker to cause a denial of service device reload via crafted...

PT-2014-1310

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.4 Description A vulnerability in the SSL VPN feature of Cisco IOS allows remote attackers to cause a denial of service condition by consuming memory via crafted HTTP requests. The issue is due to a failure to...