PT-2013-6090

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description The issue arises from improper memory management for TFTP UDP flows, allowing remote attackers to cause a denial of service through memory consumption. This can be achieved via TFTP clie...

CVE-2013-6704: Undefined Security Weakness

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service memory consumption via TFTP 1 client or 2 server traffic, aka Bug IDs CSCuh09324 and CSCty42686...

Cross site request forgery (csrf)

The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service process reload via a request for an unspecified MIB, aka Bug ID CSCuh43144...

PT-2013-6092

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description A denial of service issue exists due to improper handling of Multiprotocol Label Switching MPLS packets during IP header validation. This could allow an unauthenticated, remote attacker ...

CVE-2013-6706: Improper Input Validation

The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service device reload via crafted MPLS packets that are not properly handled during IP header validation, aka Bug ID CSCuj23992...

PT-2013-6086

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the Simple Network Management Protocol SNMP module, which allows remote attackers to cause a denial of service process reload via a request for an...

CVE-2013-6700: Improper Input Validation

The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service process reload via a request for an unspecified MIB, aka Bug ID CSCuh43144...

Information disclosure

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

CVE-2013-6694

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

CVE-2013-6693

The MLDP implementation in Cisco IOS 15.33S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause a denial of service chunk corruption and device reload by establishing many multicast flows, aka Bug ID CSCue22345...

Memory corruption

The MLDP implementation in Cisco IOS 15.33S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause a denial of service chunk corruption and device reload by establishing many multicast flows, aka Bug ID CSCue22345...

CVE-2013-6694: Improper Input Validation

The IPSec implementation in Cisco IOS allows remote attackers to cause a denial of service MTU change and tunnel-session drop via crafted ICMP packets, aka Bug ID CSCul29918...

PT-2013-6081

Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description A vulnerability in the IPSec tunnel implementation allows an unauthenticated, remote attacker to change the tunnel MTU or path MTU and potentially cause IPSec tunnels to drop. This is due t...

CVE-2013-6692: Undefined Security Weakness

Cisco IOS XE 3.8S.2 and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service device reload via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949...

CVE-2013-6693: Improper Restriction of Operations within the Bounds of a Memory Buffer

The MLDP implementation in Cisco IOS 15.33S and earlier on 7600 routers, when many VRFs are configured, allows remote attackers to cause a denial of service chunk corruption and device reload by establishing many multicast flows, aka Bug ID CSCue22345...

PT-2013-6079

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.8S.2 and earlier Description A issue in the DHCP function that assigns IP addresses to AAA clients allows remote authenticated users to cause a denial of service, resulting in a device reload. This is due to improper...

PT-2013-6080

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.33S and earlier Description A denial of service issue exists due to chunk corruption when MLDP and a large number of VRFs are configured on a device. An attacker could exploit this by sending a large number of multicast...

Design/Logic Flaw

The SSL VPN implementation in Cisco IOS 15.31T2 and earlier allows remote authenticated users to cause a denial of service interface queue wedge via crafted DTLS packets in an SSL session, aka Bug IDs CSCuh97409 and CSCud90568...

CVE-2013-6686

The SSL VPN implementation in Cisco IOS 15.31T2 and earlier allows remote authenticated users to cause a denial of service interface queue wedge via crafted DTLS packets in an SSL session, aka Bug IDs CSCuh97409 and CSCud90568...

CVE-2013-6686: Improper Input Validation

The SSL VPN implementation in Cisco IOS 15.31T2 and earlier allows remote authenticated users to cause a denial of service interface queue wedge via crafted DTLS packets in an SSL session, aka Bug IDs CSCuh97409 and CSCud90568...