Cisco IOS XR Software OSPF Link State Advertisement PCE Vulnerability (cisco-sa-20160104-iosxr)

A vulnerability in Open Shortest Path First OSPF Link State Advertisement LSA handling by Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system does not limit the number of PCE elements used for OSPF LSA updates. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco IOS XR OSPF Link State Advertisement PCE DoS (cisco-sa-20160104-iosxr)

The remote Cisco IOS XR device is affected by a denial of service vulnerability due to the number of Open Shortest Path First OSPF Path Computation Elements PCEs configured for the OSPF Link State Advertisement LSA opaque area update. An unauthenticated, remote attacker can exploit this, via a...

CVE-2015-6432

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...

Design/Logic Flaw

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...

CVE-2015-6432

CVE-2015-6432 affects Cisco IOS XR software (versions 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, 5.3.2). The issue stems from improper restriction on the number of PCEs used for OSPF LSA opaque area updates, enabling an unauthenticated, remote attacker to cause a DoS (device reload) ...

Cisco IOS XR Software OSPF Link State Advertisement PCE Vulnerability

A vulnerability in Open Shortest Path First OSPF Link State Advertisement LSA handling by Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to the number of OSPF Path Computation Elements PCEs that are...

CVE-2015-6256

Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service OSPF process restart via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820...

Code injection

Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service OSPF process restart via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820...

CVE-2015-6256

CVE-2015-6256 affects Cisco ASR 5000 devices running software 19.0.M0.60828, where crafted length fields in OSPF packet headers can cause the OSPF process to restart, leading to a denial of service. The vulnerability stems from improper validation of OSPF header length fields in the device’s OSPF...

CVE-2015-6256

Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service OSPF process restart via crafted length fields in headers of OSPF packets, aka Bug ID CSCuv62820...

Cisco Aggregation Services Router ASR 5000 and ASR 5500 OSPF Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First OSPF protocol implementation of the Cisco Aggregation Services Router ASR 5000 and ASR 5500 System Software could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition because the OSPF process restarts. The...

PT-2015-1628 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.32.243 and 9.130.21 Description: The issue is related to resource management errors in the Cisco Adaptive Security Appliance, allowing an unauthenticated, adjacent attacker to cause a...

Oracle Solaris Third-Party Patch Update : quagga (multiple_denial_of_service_vulnerabilities4)

The remote Solaris system is missing necessary patches to address security updates : - bgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service crash via a malformed 1 OPEN message or 2 a COMMUNITY attribute, which triggers a NULL pointer dereference. NOTE:...

Cisco IOS XE OSPF Opaque LSA DoS (CSCui21030)

The remote Cisco device is affected by a denial of service vulnerability due to improper parsing of certain options in OSPF link-state advertisement LSA type 11 packets. A remote, unauthenticated attacker, using specially crafted OSPF packets with unusual options can cause a device reload,...

Cisco IOS OSPF Opaque LSA DoS (CSCui21030)

The remote Cisco device contains an issue in the OSPF implementation. The flaw is due to improper parsing of certain options in OSPF link-state advertisement LSA type 11 packets. A remote, unauthenticated can cause a denial of service device reload via specially crafted OSPF packets with unusual...

Cisco IOS 11/12 OSPF Neighbor Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6895/info Cisco IOS is prone to a remotely exploitable buffer overflow condition when handling malformed OSPF Open Shortest Path First packets. The overflow occurs when more than 255 OSPF neighbors are announced. This may...

D-Link多款路由器产品远程安全限制绕过漏洞

BUGTRAQ ID: 65161 CVECAN ID: CVE-2013-7308 Dlink，友讯科技股份有限公司，专注于无线网络和以太网路硬件产品的设计开发。 D-Link DES-3810-28交换机（固件版本R2.20.B017）的OSPF实现中，没有考虑LSA数据库操作之前LSA数据包内存在重复的Link State ID值，这可使远程攻击者通过特制的LSA数据包，利用此漏洞造成拒绝服务（路由中断）或获取敏感的数据包信息。 0 D-Link DES-3810-28 R2.20.B017 厂商补丁： D-Link ------...

多个NEC产品远程安全限制绕过漏洞

BUGTRAQ ID: 65170 CVECAN ID: CVE-2013-7314 NEC是日本一家跨国信息技术公司，为商业企业、通信服务以及政府提供信息技术和网络产品。 NEC IP38X, IX1000, IX2000, IX3000路由器的OSPF实现中，执行LSA数据库操作之前没有考虑链路状态广告（LSA数据包内的重复链路状态ID值，这可使远程攻击者通过特制的LSA数据包，造成拒绝服务（路由中断）或获取敏感数据包信息。 0 NEC IP38X NEC IX1000 NEC IX2000 NEC IX3000 厂商补丁： NEC ---...

CVE-2013-7306

The OSPF implementation on Brocade routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing disruption or obtain sensitiv...