Cisco IOS Aironet Access Point DoS

The remote Cisco IOS device may have a denial of service vulnerability. An input queue wedge can occur when IOS is running on an Aironet Access Point. This results in clients being unable to be authenticated, resulting in a denial of service. C Tenable Network Security, Inc. include"compat.inc"; ...

mtrace NSE Script

Queries for the multicast path from a source to a destination host. This works by sending an IGMP Traceroute Query and listening for IGMP Traceroute responses. The Traceroute Query is sent to the first hop and contains information about source, destination and multicast group addresses. First hop...

Cisco IOS Web Authentication DoS

The version of Cisco IOS installed on the remote host is affected by a denial of service vulnerability due to an error while parsing local web authentication. A remote attacker, by entering an extremely rapid input of credentials, can exploit this to crash the switch, forcing a reboot. C Tenable...

CVE-2012-1338

Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service device reload by completing local web authentication quickly, aka Bug ID CSCts88664...

CVE-2012-1367

The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service Route Processor crash via a BGP UPDATE message with a modified local-preference aka LOCALPREF attribute length, aka Bug ID CSCtq06538...

Code injection

The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service Route Processor crash via a BGP UPDATE message with a modified local-preference aka LOCALPREF attribute length, aka Bug ID CSCtq06538...

CVE-2012-1367

CVE-2012-1367 affects Cisco IOS MallocLite, where the vulnerability exists in the BGP UPDATE handling that parses the local-preference attribute length, enabling remote attackers to trigger a Route Processor crash (DoS). Affected IOS versions include 12.0, 12.2, and 15.0–15.2. The provided source...

CVE-2012-1367

The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service Route Processor crash via a BGP UPDATE message with a modified local-preference aka LOCALPREF attribute length, aka Bug ID CSCtq06538...

CVE-2012-1344: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service device reload by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328...

PT-2012-3207

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.2, 15.0 through 15.1, and 15.2 Description The issue allows remote attackers to cause a denial of service, resulting in a Route Processor crash. This can be achieved via a BGP UPDATE message with a modified...

CVE-2012-1338: Concurrent Execution using Shared Resource with Improper Synchronization

Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service device reload by completing local web authentication quickly, aka Bug ID CSCts88664...

PT-2012-3195

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 and 15.1 on Catalyst 3560 and 3750 series switches Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload, by completing local web authentication quickly...

CVE-2012-1350: Undefined Security Weakness

Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service radio-interface input-queue hang via IAPP 0x3281 packets, aka Bug ID CSCtc12426...

PT-2012-3202

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.3 and 12.4 Description The issue allows remote attackers to cause a denial of service, specifically a radio-interface input-queue hang, via IAPP 0x3281 packets. Recommendations For Cisco IOS version 12.3, update to a fixe...

CVE-2012-1367: Improper Input Validation

The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service Route Processor crash via a BGP UPDATE message with a modified local-preference aka LOCALPREF attribute length, aka Bug ID CSCtq06538...

PT-2012-3199

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload. This can be achieved by using a web browser to refresh the SSL VPN portal page when a...

PT-2012-4061

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions prior to 4.2.1 Description The issue allows remote attackers to cause a denial of service, resulting in a packet transmission outage, via a crafted packet. Recommendations For versions prior to 4.2.1, update to version...

Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco IOS XR Software Route Processor Denial of Service Vulnerability Advisory ID: cisco-sa-20120530-iosxr Revision 1.0 For Public Release 2012 May 30 16:00 UTC GMT +--------------------------------------------------------------------- Summary =====...

Cisco IOS XR DoS

DoS on malcrafted packets...

CVE-2012-2488: Improper Input Validation

Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service packet transmission outage via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593...