Cisco IOS XR Software OSPF Link State Advertisement PCE Vulnerability

A vulnerability in Open Shortest Path First OSPF Link State Advertisement LSA handling by Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to the number of OSPF Path Computation Elements PCEs that are...

CVE-2015-6256

Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service OSPF process restart via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820...

Code injection

Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service OSPF process restart via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820...

CVE-2015-6256

CVE-2015-6256 affects Cisco ASR 5000 devices running software 19.0.M0.60828, where crafted length fields in OSPF packet headers can cause the OSPF process to restart, leading to a denial of service. The vulnerability stems from improper validation of OSPF header length fields in the device’s OSPF...

CVE-2015-6256

Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service OSPF process restart via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820...

Cisco Aggregation Services Router ASR 5000 and ASR 5500 OSPF Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First OSPF protocol implementation of the Cisco Aggregation Services Router ASR 5000 and ASR 5500 System Software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition because the OSPF process restarts. The...

PT-2015-1628 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.32.243 and 9.130.21 Description: The issue is related to resource management errors in the Cisco Adaptive Security Appliance, allowing an unauthenticated, adjacent attacker to cause a...

Oracle Solaris Third-Party Patch Update : quagga (multiple_denial_of_service_vulnerabilities4)

The remote Solaris system is missing necessary patches to address security updates : - bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service crash via a malformed 1 OPEN message or 2 a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE:...

Cisco IOS OSPF Opaque LSA DoS (CSCui21030)

The remote Cisco device contains an issue in the OSPF implementation. The flaw is due to improper parsing of certain options in OSPF link-state advertisement LSA type 11 packets. A remote, unauthenticated can cause a denial of service device reload via specially crafted OSPF packets with unusual...

Cisco IOS XE OSPF Opaque LSA DoS (CSCui21030)

The remote Cisco device is affected by a denial of service vulnerability due to improper parsing of certain options in OSPF link-state advertisement LSA type 11 packets. A remote, unauthenticated attacker, using specially crafted OSPF packets with unusual options can cause a device reload,...

Cisco IOS 11/12 OSPF Neighbor Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6895/info Cisco IOS is prone to a remotely exploitable buffer overflow condition when handling malformed OSPF Open Shortest Path First packets. The overflow occurs when more than 255 OSPF neighbors are announced. This may...

D-Link多款路由器产品远程安全限制绕过漏洞

BUGTRAQ ID: 65161 CVECAN ID: CVE-2013-7308 Dlink，友讯科技股份有限公司，专注于无线网络和以太网路硬件产品的设计开发。 D-Link DES-3810-28交换机（固件版本R2.20.B017）的OSPF实现中，没有考虑LSA数据库操作之前LSA数据包内存在重复的Link State ID值，这可使远程攻击者通过特制的LSA数据包，利用此漏洞造成拒绝服务（路由中断）或获取敏感的数据包信息。 0 D-Link DES-3810-28 R2.20.B017 厂商补丁： D-Link ------...

多个NEC产品远程安全限制绕过漏洞

BUGTRAQ ID: 65170 CVECAN ID: CVE-2013-7314 NEC是日本一家跨国信息技术公司，为商业企业、通信服务以及政府提供信息技术和网络产品。 NEC IP38X, IX1000, IX2000, IX3000路由器的OSPF实现中，执行LSA数据库操作之前没有考虑链路状态广告（LSA数据包内的重复链路状态ID值，这可使远程攻击者通过特制的LSA数据包，造成拒绝服务（路由中断）或获取敏感数据包信息。 0 NEC IP38X NEC IX1000 NEC IX2000 NEC IX3000 厂商补丁： NEC ---...

CVE-2013-7314

The OSPF implementation on NEC IP38X, IX1000, IX2000, and IX3000 routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing...

CVE-2013-7313

The OSPF implementation in Juniper Junos through 13.x, JunosE, and ScreenOS through 6.3.x does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial o...

CVE-2013-7308

The OSPF implementation on the D-Link DES-3810-28 switch with firmware R2.20.B017 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of servic...

CVE-2013-7309

The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing disruption or obtain...

CVE-2013-7311

The OSPF implementation in Check Point Gaia OS R75.X and R76 and IPSO OS 6.2 R75.X and R76 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial ...

CVE-2013-7312

The OSPF implementation on Enterasys switches and routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing disruption or...

CVE-2013-7307

The OSPF implementation on the Brocade Vyatta vRouter with software before 6.6R1 does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service...