PT-2012-1780

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1 Cisco IOS XE versions 3.x Description The issue arises from improper handling of the set mpls experimental imposition command, allowing remote attackers to cause a denial of service, resulting in a device...

PT-2012-1784

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.0 through 15.2 Description The issue allows remote attackers to cause a denial of service, resulting in a device crash, via crafted network traffic when Point-to-Point Termination and Aggregation PTA and L2TP are...

CVE-2011-2578: Undefined Security Weakness

Memory leak in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption via malformed SIP packets on a NAT interface, aka Bug ID CSCts12366...

CVE-2011-3289: Undefined Security Weakness

Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640...

PT-2012-2521

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.258SE2 through 15.01SE Description The issue allows remote attackers to bypass intended access restrictions by sending network traffic. This occurs due to the extended ACL functionality discarding lines that end with...

PT-2012-1565

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.4 through 15.0 Description The issue allows remote attackers to cause a denial of service, resulting in a device crash, by sending a malformed HTTP response to a request for service installation. Recommendations For Cisco...

PT-2012-1783

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.2S Description The issue allows remote attackers to cause a denial of service, resulting in an interface queue wedge, via malformed UDP traffic on port 465. Recommendations For Cisco IOS version 15.2S, update to a version...

CVE-2011-2586: Improper Input Validation

The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service device crash via a malformed HTTP response to a request for service installation, aka Bug ID CSCts12249...

CVE-2012-0362: Undefined Security Weakness

The extended ACL functionality in Cisco IOS 12.258SE2 and 15.01SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features Advisory ID: cisco-sa-20120328-mace Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT...

Cisco IOS multiple security vulnerabilities

Multiple DoS conditions...

Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerability Advisory ID: cisco-sa-20120328-nat Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT +-------------------------------------------------------------------...

Cisco IOS Software Multicast Source Discovery Protocol DoS (cisco-sa-20120328-msdp)

According to its self-reported version number, the remote Cisco IOS device is affected by a denial of service vulnerability in the Multicast Source Discovery Protocol MSDP implementation. An unauthenticated, remote attacker can exploit this, via an MSDP packet containing encapsulated IGMP data, t...

Cisco Security Advisory: Cisco IOS Software Smart Install Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software Smart Install Denial of Service Vulnerability Advisory ID: cisco-sa-20120328-smartinstall Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT...

Cisco IOS Software Traffic Optimization Features Multiple DoS

The version of Cisco IOS installed on the remote device is affected by multiple denial of service vulnerabilities due to message parsing flaws related to the Wide Area Application Services WAAS Express feature and the Measurement, Aggregation, and Correlation Engine MACE feature. A remote,...

Cisco IOS Software Network Address Translation Vulnerability (cisco-sa-20120328-nat)

The Cisco IOS Software Network Address Translation NAT feature contains a denial of service DoS vulnerability in the translation of Session Initiation Protocol SIP packets. The vulnerability is caused when packets in transit on the vulnerable device require translation on the SIP payload. Cisco h...

Cisco Security Advisory: Cisco IOS Software RSVP Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software RSVP Denial of Service Vulnerability Advisory ID: cisco-sa-20120328-rsvp Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT +---------------------------------------------------------------------...

CVE-2012-1312

The MACE feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service device reload via crafted transit traffic, aka Bug IDs CSCtq64987 and CSCtu57226...

CVE-2012-1315

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit SIP traffic, aka Bug ID CSCti46171...

CVE-2012-0381

The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service device reload by sending IKE UDP packets over...