Cisco IOS XR Software Route Processor Denial of Service Vulnerability

Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers ASR Route Switch Processor RSP-4G and RSP-8G, Route Switch Processor 440 RSP440, and Cisco...

Code injection

dot11t/tifdot11halath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service assertion failure and reboot via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, aka Bug ID CSCtt94391...

Race condition

Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service device crash by sending IPv6 packets, aka Bug ID CSCtk53534...

CVE-2012-1324

Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service device crash by sending IPv6 packets, aka Bug ID CSCtk53534...

CVE-2012-1327

Cisco IOS versions affected by CVE-2012-1327 are 12.3, 12.4, 15.0, and 15.1. The flaw is in dot11t/t_if_dot11_hal_ath.c and can be exploited remotely to trigger an assertion failure and device reboot via 802.11 wireless traffic, as demonstrated by a video call from iOS 5.0 on an iPhone 4S (Bug ID...

Memory corruption

Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager CUCM 7.x, allows remote attackers to cause a denial of service memory consumption via a crafted response to a SIP SUBSCRIBE message, aka Bug IDs CSCto93837 and CSCtj61883...

CVE-2011-4019

CVE-2011-4019 affects Cisco IOS 12.4 and 15.0–15.2, and Cisco Unified Communications Manager (CUCM) 7.x. The issue is a memory leak that allows remote attackers to cause denial of service by sending a crafted SIP SUBSCRIBE response. Root cause is a vulnerability in handling SIP SUBSCRIBE messages...

PT-2012-1822

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2 Cisco IOS XE versions 3.x Description The issue allows remote authenticated users to cause a denial of service, resulting in a segmentation fault and device crash, when the software is configured as an IPse...

CVE-2011-4019: Undefined Security Weakness

Memory leak in Cisco IOS 12.4 and 15.0 through 15.2, and Cisco Unified Communications Manager CUCM 7.x, allows remote attackers to cause a denial of service memory consumption via a crafted response to a SIP SUBSCRIBE message, aka Bug IDs CSCto93837 and CSCtj61883...

CVE-2012-1327: Improper Access Control

dot11t/tifdot11halath.c in Cisco IOS 12.3, 12.4, 15.0, and 15.1 allows remote attackers to cause a denial of service assertion failure and reboot via 802.11 wireless traffic, as demonstrated by a video call from Apple iOS 5.0 on an iPhone 4S, aka Bug ID CSCtt94391...

PT-2012-3190

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.3 through 15.1 Description The issue allows remote attackers to cause a denial of service, resulting in an assertion failure and reboot, via 802.11 wireless traffic. This can be demonstrated by a video call from Apple iOS...

PT-2012-3189

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2 Description A race condition in the Zone-Based Firewall allows remote attackers to cause a denial of service by sending IPv6 packets when IPS policies are configured. Recommendations For Cisco IOS versions...

CVE-2012-1324: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Zone-Based Firewall in Cisco IOS 15.1 and 15.2, when IPS policies are configured, allows remote attackers to cause a denial of service device crash by sending IPv6 packets, aka Bug ID CSCtk53534...

PT-2012-1785

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 and 15.0 through 15.2 Cisco Unified Communications Manager CUCM version 7.x Description A memory leak issue allows remote attackers to cause a denial of service by consuming memory via a crafted response to a SIP...

CVE-2011-4231: Improper Input Validation

Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service segmentation fault and device crash via unspecified vectors, aka Bug ID CSCtq61128...

CVE-2012-0362

The extended ACL functionality in Cisco IOS 12.258SE2 and 15.01SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106...

CVE-2011-4015

Cisco IOS 15.2S allows remote attackers to cause a denial of service interface queue wedge via malformed UDP traffic on port 465, aka Bug ID CSCts48300...

Design/Logic Flaw

Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640...

Memory corruption

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366...

Code injection

The NETIO and IPV4IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service CPU consumption via crafted network traffic, aka Bug ID CSCti59888...