CVE-2011-3277

CVE-2011-3277 affects Cisco IOS NAT implementation (12.1–12.4, 15.0–15.1) and IOS-XE 3.1.xSG. The issue arises from NAT handling of H.323 traffic on TCP/1720, enabling remote attackers to cause a DoS (device reload). Cisco’s advisory notes multiple NAT DoS vectors (including H.323), with mitigati...

CVE-2011-0946

CVE-2011-0946 involves a vulnerability in Cisco IOS/NAT where NAT for NetMeeting Directory (LDAP) can be triggered by malformed LDAP traffic, causing a DoS (device reload or hang). Affected are Cisco IOS releases 12.1–12.4 and 15.0–15.1, plus IOS XE 3.1.xSG. The weakness is within the NAT transla...

PT-2011-4361

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.1 Cisco IOS XE versions 2.1.x through 3.3.x Description The IP Service Level Agreement IP SLA functionality allows remote attackers to cause a denial of service, resulting in memory corruption and device reload, via...

PT-2011-4359

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.233SB10 Cisco IOS versions prior to 15.01S3a Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a sequence of crafted ICMP packets. Recommendation...

CVE-2011-3280: Undefined Security Weakness

Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service memory consumption or device reload by sending crafted SIP packets to UDP port 5060, aka Bug ID CSCtj04672...

CVE-2011-3274: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device crash via a crafted IPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCto07919...

CVE-2011-3270: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.2SB before 12.233SB10 and 15.0S before 15.01S3a on Cisco 10000 series routers allows remote attackers to cause a denial of service device reload via a sequence of crafted ICMP packets, aka Bug ID CSCtk62453...

CVE-2011-3277: Undefined Security Weakness

Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload by sending crafted H.323 packets to TCP port 1720, aka Bug ID CSCth11006...

CVE-2011-3279: Undefined Security Weakness

The provider-edge MPLS NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload via a malformed SIP packet to UDP port 5060, aka Bug ID CSCti98219...

CVE-2011-3272: Undefined Security Weakness

The IP Service Level Agreement IP SLA functionality in Cisco IOS 15.1, and IOS XE 2.1.x through 3.3.x, allows remote attackers to cause a denial of service memory corruption and device reload via malformed IP SLA packets, aka Bug ID CSCtk67073...

CVE-2011-0939: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service device reload via a crafted SIP message, aka Bug ID CSCth03022...

CVE-2011-3276: Undefined Security Weakness

Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload or hang by sending crafted SIP packets to TCP port 5060, aka Bug ID CSCso02147...

CVE-2011-3273: Undefined Security Weakness

Memory leak in Cisco IOS 15.0 through 15.1, when IPS or Zone-Based Firewall aka ZBFW is configured, allows remote attackers to cause a denial of service memory consumption or device crash via vectors that trigger many session creation flows, aka Bug ID CSCti79848...

CVE-2011-3271: Undefined Security Weakness

Unspecified vulnerability in the Smart Install functionality in Cisco IOS 12.2 and 15.1 allows remote attackers to execute arbitrary code or cause a denial of service device crash via crafted TCP packets to port 4786, aka Bug ID CSCto10165...

CVE-2011-3275: Undefined Security Weakness

Memory leak in Cisco IOS 12.4, 15.0, and 15.1, and IOS XE 2.5.x through 3.2.x, allows remote attackers to cause a denial of service memory consumption via a crafted SIP message, aka Bug ID CSCti48504...

CVE-2011-2072: Undefined Security Weakness

Memory leak in Cisco IOS 12.4, 15.0, and 15.1, Cisco IOS XE 2.5.x through 3.2.x, and Cisco Unified Communications Manager CUCM 6.x and 7.x before 7.15bsu4, 8.x before 8.51su2, and 8.6 before 8.61 allows remote attackers to cause a denial of service memory consumption and device reload or process...

CVE-2011-3278: Undefined Security Weakness

Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload by sending crafted SIP packets to UDP port 5060, aka Bug ID CSCti48483...

CVE-2011-3282: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

CVE-2011-0946: Undefined Security Weakness

The NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload or hang via malformed NetMeeting Directory aka Internet Locator Service or ILS LDAP traffic, aka Bug ID CSCtd10712...

CVE-2011-3281: Undefined Security Weakness

Unspecified vulnerability in Cisco IOS 15.0 through 15.1, in certain HTTP Layer 7 Application Control and Inspection configurations, allows remote attackers to cause a denial of service device reload or hang via a crafted HTTP packet, aka Bug ID CSCto68554...