CVE-2014-6378: Undefined Security Weakness

Juniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12.1X47 before D10, 12.2 before R9, 12.2X50 before D70, 12.3 before R7, 13.1 before R4 before S3, 13.1X49 before D55, 13.1X50 before D30, 13.2 before R5, 13.2X50 before D20, 13.2X51 before D26 and D30,...

PT-2014-7199

Name of the Vulnerable Software and Affected Versions Juniper Junos versions 11.4 through 12.1X44 before D35 Juniper Junos versions 12.1X45 through 12.1X45 before D30 Juniper Junos versions 12.1X46 through 12.1X46 before D25 Juniper Junos versions 12.1X47 through 12.1X47 before D10 Juniper Junos...

Juniper Junos RSVP 'rpd' Remote DoS (JSA10652)

According to its self-reported version number, the remote Juniper Junos device is affected by a denial of service vulnerability due to improper handling of RSVP PATH messages. A remote attacker can exploit this issue, by sending a specially crafted RSVP packet, to crash the 'rpd' process. Note th...

Cisco IOS Software RSVP DoS (cisco-sa-20140924-rsvp)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Resource Reservation Protocol RSVP implementation due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending...

Cisco IOS XE Software Multiple IPv6 Metadata Flow Vulnerabilities (cisco-sa-20140924-metadata)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by two vulnerabilities in the IPv6 metadata flow feature due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending specially crafted RSVP flows to cause t...

Cisco IOS XE Software RSVP DoS (cisco-sa-20140924-rsvp)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the Resource Reservation Protocol RSVP implementation due to improper handling of RSVP packets. A remote attacker can exploit this issue by sending...

CVE-2014-3354

Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service device reload via malformed RSVP...

CVE-2014-3356

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCue22753...

Design/Logic Flaw

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCug75942...

Code injection

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCue22753...

Design/Logic Flaw

Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service device reload via malformed RSVP...

CVE-2014-3354

Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service device reload via malformed RSVP...

CVE-2014-3356

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCue22753...

CVE-2014-3355

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCug75942...

CVE-2014-3356: Improper Restriction of Operations within the Bounds of a Memory Buffer

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCue22753...

CVE-2014-3355: Improper Restriction of Operations within the Bounds of a Memory Buffer

The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service device reload via malformed RSVP packets, aka Bug ID CSCug75942...

CVE-2014-3354: Improper Input Validation

Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service device reload via malformed RSVP...

Cisco IOS Software RSVP Vulnerability

A vulnerability in the implementation of the Resource Reservation Protocol RSVP in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker cause the device to reload. This vulnerability could be exploited repeatedly to cause an extended denial of service DoS...

PT-2014-5247

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.3 Cisco IOS XE versions 3.3.xXO before 3.3.1XO Cisco IOS XE versions 3.6.xS before 3.7.6S is not accurate, it should be versions 3.6.xS and 3.7.xS before 3.7.6S Corrected to: Cisco IOS XE versions 3.6.xS and...

PT-2014-5248

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.3 Cisco IOS XE versions 3.3.xXO before 3.3.1XO Cisco IOS XE versions 3.6.xS before 3.7.6S is not accurate, it should be versions 3.6.xS and 3.7.xS before 3.7.6S Corrected to: Cisco IOS XE versions 3.6.xS and...