PT-2015-3984

Name of the Vulnerable Software and Affected Versions Cisco NX-OS affected versions not specified Description The issue is related to the TACACS+ command-authorization implementation, which allows local users to cause a denial of service by executing a long CLI command. This is due to incorrect...

CVE-2015-0578

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

PT-2015-4725 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A issue in the DHCPv6 relay feature allows remote attackers to cause a denial of service, resulting in a device reload, via crafted DHCP packets on th...

CVE-2015-0578: Improper Input Validation

Cisco Adaptive Security Appliance ASA Software, when a DHCPv6 relay is configured, allows remote attackers to cause a denial of service device reload via crafted DHCP packets on the local network, aka Bug ID CSCur45455...

Command injection

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

PT-2014-5298

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.233SRE9a Cisco IOS XE versions prior to 3.13S Description The issue affects the Ethernet Connectivity Fault Management handling feature, allowing remote attackers to cause a denial of service by sending malformed...

CVE-2014-3409: Undefined Security Weakness

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

CVE-2014-3370

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447...

CVE-2014-3406

Race condition in the IP logging feature in Cisco Intrusion Prevention System IPS Software 7.17E4 and earlier allows remote attackers to cause a denial of service device reload via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085...

PT-2014-5295

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software versions 7.17E4 and earlier Description A race condition exists in the IP logging feature, allowing remote attackers to cause a denial of service device reload via crafted IP traffic that matches ...

PT-2014-5259

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS and Expressway Software versions prior to X8.2 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a high rate of crafted packet...

PT-2014-5260

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS and Expressway Software versions prior to X8.1.1 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SDP packets...

CVE-2014-3406: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the IP logging feature in Cisco Intrusion Prevention System IPS Software 7.17E4 and earlier allows remote attackers to cause a denial of service device reload via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085...

CVE-2014-3368: Undefined Security Weakness

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.2 allow remote attackers to cause a denial of service device reload via a high rate of crafted packets, aka Bug ID CSCui06507...

CVE-2014-3370: Undefined Security Weakness

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447...

CVE-2014-3388

The DNS inspection engine in Cisco ASA Software 9.0 before 9.04.13, 9.1 before 9.15.7, and 9.2 before 9.22 allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCuo68327...

Code injection

The SQLNet inspection engine in Cisco ASA Software 7.2 before 7.25.13, 8.2 before 8.25.50, 8.3 before 8.32.42, 8.4 before 8.47.15, 8.5 before 8.51.21, 8.6 before 8.61.14, 8.7 before 8.71.13, 9.0 before 9.04.5, and 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reloa...

Code injection

The IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reload via crafted UDP packets, aka Bug ID CSCul36176...

Code injection

The GPRS Tunneling Protocol GTP inspection engine in Cisco ASA Software 8.2 before 8.25.51, 8.4 before 8.47.15, 8.7 before 8.71.13, 9.0 before 9.04.8, and 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reload via a crafted series of GTP packets, aka Bug ID CSCum5639...

CVE-2014-3385

Race condition in the Health and Performance Monitoring HPM for ASDM feature in Cisco ASA Software 8.3 before 8.32.42, 8.4 before 8.47.11, 8.5 before 8.51.19, 8.6 before 8.61.13, 8.7 before 8.71.11, 9.0 before 9.04.8, and 9.1 before 9.14.5 allows remote attackers to cause a denial of service devi...