CVE-2013-1241: Improper Authentication

The ISM module in Cisco IOS on ISR G2 routers does not properly handle authentication-header packets, which allows remote authenticated users to cause a denial of service module reload via a series of malformed packets, aka Bug ID CSCub92025...

PT-2013-3000

Name of the Vulnerable Software and Affected Versions Cisco IOS on ISR G2 routers affected versions not specified Description The issue arises from the improper handling of authentication-header packets by the ISM module in Cisco IOS on ISR G2 routers. This allows remote authenticated users to...

Code injection

The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service process restart via crafted SNMP packets, aka Bug ID CSCue69472...

CVE-2013-1234: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service process restart via crafted SNMP packets, aka Bug ID CSCue69472...

PT-2013-2996

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the SNMP module in Cisco IOS XR, which allows remote authenticated users to cause a denial of service by sending crafted SNMP packets. This is due to...

CVE-2013-1216: Exposure of Sensitive Information to an Unauthorized Actor

Memory leak in the SNMP module in Cisco IOS XR allows remote authenticated users to cause a denial of service memory consumption and process restart via crafted SNMP packets, aka Bug ID CSCue31546...

PT-2013-2979

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description A memory leak in the SNMP module allows remote authenticated users to cause a denial of service via crafted SNMP packets. The issue is due to insufficient checking of data input, which c...

Input validation

The generic input/output control implementation in Cisco IOS does not properly manage buffers, which allows remote authenticated users to cause a denial of service device reload by sending many SNMP requests at the same time, aka Bug ID CSCub41105...

CVE-2013-1217

The generic input/output control implementation in Cisco IOS does not properly manage buffers, which allows remote authenticated users to cause a denial of service device reload by sending many SNMP requests at the same time, aka Bug ID CSCub41105...

PT-2013-2980

Name of the Vulnerable Software and Affected Versions Cisco IOS affected versions not specified Description The issue is related to the generic input/output control implementation in Cisco IOS, which does not properly manage buffers. This allows remote authenticated users to cause a denial of...

CVE-2013-1217: Improper Restriction of Operations within the Bounds of a Memory Buffer

The generic input/output control implementation in Cisco IOS does not properly manage buffers, which allows remote authenticated users to cause a denial of service device reload by sending many SNMP requests at the same time, aka Bug ID CSCub41105...

Cisco IOS Generic Input/Output SNMP DoS

The remote Cisco IOS device has a denial of service vulnerability in the generic input/output control mechanism that could allow an authenticated, remote attacker to trigger a reload of the Supervisor Engine or the device; thus resulting in a denial of service condition. C Tenable Network Securit...

CVE-2013-1166

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

Code injection

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 MVPN...

Code injection

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 multicast packets, aka Bug...

CVE-2013-1166

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

CVE-2013-1165

Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR allows remote attackers to cause a denial of service card reload by sending many crafted L2TP packets, aka Bug ID CSCtz23293...

PT-2013-3923

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.4 through 3.4.4S Cisco IOS XE versions 3.5 through 3.7 before 3.7.1S Description The issue is related to the improper implementation of the Cisco Multicast Leaf Recycle Elimination MLRE feature in Cisco IOS XE, allowing...

PT-2013-2935

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.2 through 3.4 before 3.4.2S, and 3.5 Description The issue allows remote attackers to cause a denial of service card reload via packets that are not properly handled during the processing of encapsulation when bridge...

CVE-2013-1167: Improper Limitation of a Pathname to a Restricted Directory

Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers ASR, when bridge domain interface BDI is enabled, allows remote attackers to cause a denial of service card reload via packets that are not properly handled during the processing of encapsulation, aka...