CVE-2016-6421

Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service process restart via a crafted OSPF Link State Advertisement LSA update, aka Bug ID CSCvb05643...

Code injection

Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service process restart via a crafted OSPF Link State Advertisement LSA update, aka Bug ID CSCvb05643...

CVE-2016-6421

Cisco IOS XR 5.2.2 allows remote attackers to cause a denial of service process restart via a crafted OSPF Link State Advertisement LSA update, aka Bug ID CSCvb05643...

Cisco IOS XR Software Open Shortest Path First Link State Advertisement Denial of Service Vulnerability (cisco-sa-20160928-ospf)

A vulnerability in the implementation of Open Shortest Path First OSPF Link State Advertisement LSA functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Copyright C 2016 Greenbone Networks GmbH Some text descriptions...

Cisco IOS XR Software Open Shortest Path First Link State Advertisement Denial of Service Vulnerability

A vulnerability in the implementation of Open Shortest Path First OSPF Link State Advertisement LSA functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a memory error in OSPF. An attacker...

CVE-2016-1433

Cisco IOS XR 6.0 and 6.0.1 on NCS 6000 devices allows remote attackers to cause a denial of service OSPFv3 process reload via crafted OSPFv3 packets, aka Bug ID CSCuz66289...

Cisco IOS XR Software for NCS 6000 Series Devices OSPF Packet Processing Denial of Service Vulnerability

A vulnerability in the OSPFv3 processing of Cisco IOS XR Software for Cisco Network Convergence System NCS 6000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the OSPFv3 process and result in a limited denial of service DoS condition on an affected device. The...

[SECURITY] [DSA 3654-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3654-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 26, 2016 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3654-1] quagga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3654-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 26, 2016 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3654-1 (quagga - security update)

Two vulnerabilities were discovered in quagga, a BGP/OSPF/RIP routing daemon. CVE-2016-4036 Tams Nmeth discovered that sensitive configuration files in /etc/quagga were world-readable despite containing sensitive information. CVE-2016-4049 Evgeny Uskov discovered that a bgpd instance handling man...

Debian: Security Advisory (DSA-3654-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DSA-3532-1 quagga - security update

Bulletin has no description...

Debian Security Advisory DSA 3532-1 (quagga - security update)

Kostya Kortchinsky discovered a stack-based buffer overflow vulnerability in the VPNv4 NLRI parser in bgpd in quagga, a BGP/OSPF/RIP routing daemon. A remote attacker can exploit this flaw to cause a denial of service daemon crash, or potentially, execution of arbitrary code, if bgpd is configure...

USN-2941-1: Quagga vulnerabilities

Kostya Kortchinsky discovered that Quagga incorrectly handled certain route data when configured with BGP peers enabled for VPNv4. A remote attacker could use this issue to cause Quagga to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2016-2342 It was discovered...

Cisco IOS XR Software OSPF Link State Advertisement PCE Vulnerability (cisco-sa-20160104-iosxr)

A vulnerability in Open Shortest Path First OSPF Link State Advertisement LSA handling by Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system does not limit the number of PCE elements used for OSPF LSA updates. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco IOS XR OSPF Link State Advertisement PCE DoS (cisco-sa-20160104-iosxr)

The remote Cisco IOS XR device is affected by a denial of service vulnerability due to the number of Open Shortest Path First OSPF Path Computation Elements PCEs configured for the OSPF Link State Advertisement LSA opaque area update. An unauthenticated, remote attacker can exploit this, via a...

CVE-2015-6432

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...

Design/Logic Flaw

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...

CVE-2015-6432

CVE-2015-6432 affects Cisco IOS XR software (versions 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, 5.3.2). The issue stems from improper restriction on the number of PCEs used for OSPF LSA opaque area updates, enabling an unauthenticated, remote attacker to cause a DoS (device reload) ...