CVE-2013-5475: Improper Input Validation

Cisco IOS 12.2 through 12.4 and 15.0 through 15.3, and IOS XE 2.1 through 3.9, allows remote attackers to cause a denial of service device reload via crafted DHCP packets that are processed locally by a 1 server or 2 relay agent, aka Bug ID CSCug31561...

PT-2013-1009

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 Cisco IOS versions 15.0 through 15.3 Description The issue is caused by a race condition in the IPv6 virtual fragmentation reassembly VFR implementation, allowing a remote attacker to cause a denial of...

PT-2013-5567

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0 through 15.3 Description The DNS-over-TCP implementation in Cisco IOS, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream. The Cisco IOS Software...

PT-2013-1008

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.3 Cisco IOS XE versions 3.2 through 3.8 Description A vulnerability in the Resource Reservation Protocol RSVP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote...

PT-2013-5565

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0 through 15.3 Description A vulnerability in the T1/E1 driver queue implementation could allow an unauthenticated, remote attacker to cause an interface wedge condition, leading to loss of connectivity and routing...

PT-2013-1010

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.3 Cisco IOS XE versions 2.1 through 3.9 Description The issue is related to insufficient input validation in the DHCP implementation, allowing a remote attacker to cause a denial of...

PT-2013-5563

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.1, and 15.2 Cisco IOS XE versions 3.4.2S through 3.4.5S Cisco IOS XE versions 3.6.xS before 3.6.1S Description A memory leak in the Internet Key Exchange IKE protocol could allow an unauthenticated, remote attacker ...

PT-2013-5562

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 Cisco IOS versions 15.0 through 15.1 Cisco IOS XE versions 2.1 through 3.3 Description The NTP implementation in Cisco IOS does not properly handle encapsulation of multicast NTP packets within MSDP SA...

PT-2013-5566

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0 through 15.3 Description The DNS-over-TCP implementation in Cisco IOS, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream. The Cisco IOS Software...

PT-2013-5568

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0 through 15.3 Description The issue allows remote attackers to cause a denial of service device reload via crafted TCP port-1723 packets when NAT is used. This is related to the implementation of the network addres...

PT-2013-5564

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2 Description The issue is related to the Zone-Based Firewall ZFW feature in Cisco IOS, specifically when content filtering or HTTP ALG inspection is enabled. It allows remote attackers to cause a denial of...

Code injection

The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service flood of ACK packets via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399...

CVE-2013-5469

The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service flood of ACK packets via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399...

Code injection

The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet, aka Bug ID CSCue46731...

CVE-2013-3470: Improper Input Validation

The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet, aka Bug ID CSCue46731...

PT-2013-5559

Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description The issue is related to the TCP implementation, which does not properly handle state transitions from ESTABLISHED to CLOSED. This allows remote attackers to cause a denial of service by...

CVE-2013-5469: Improper Restriction of Operations within the Bounds of a Memory Buffer

The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service flood of ACK packets via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399...

PT-2013-4420

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the Routing Information Protocol RIP process, which allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet...

OSPF LSA Manipulation Vulnerability in Cisco IOS XE (cisco-sa-20130801-lsaospf)

The remote Cisco IOS XE device is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. A remote, unauthenticated attacker can exploit this vulnerability, via specially crafted OSPF packets, to manipulate or disrupt the flo...

OSPF LSA Manipulation Vulnerability in Cisco IOS (cisco-sa-20130801-lsaospf)

The remote Cisco IOS device is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. This vulnerability could be exploited by injecting specially crafted OSPF packets. Successful exploitation could allow an unauthenticated...