Cisco IOS Software Resource Reservation Protocol Denial of Service Vulnerability (cisco-sa-20130327-rsvp)

The Resource Reservation Protocol RSVP feature in Cisco IOS Software and Cisco IOS XE Software contains a vulnerability when used on a device that has Multiprotocol Label Switching with Traffic Engineering MPLS-TE enabled. Successful exploitation of the vulnerability could allow an unauthenticate...

CVE-2013-1143

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service incorrect memory access and device reload via a traffic...

Design/Logic Flaw

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service incorrect memory access and device reload via a traffic...

CVE-2013-1143

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service incorrect memory access and device reload via a traffic...

CVE-2013-1143

CVE-2013-1143 describes a denial-of-service vulnerability in the RSVP implementation of Cisco IOS (12.2; 15.0–15.2) and IOS XE (3.1.xS–3.7.xS), triggered when MPLS-TE is enabled. A malformed RSVP PATH message can cause incorrect memory access, leading to a device reload and DoS condition. The iss...

CVE-2013-1143: Improper Restriction of Operations within the Bounds of a Memory Buffer

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service incorrect memory access and device reload via a traffic...

Cisco IOS Software Resource Reservation Protocol Denial of Service Vulnerability

The Resource Reservation Protocol RSVP feature in Cisco IOS Software and Cisco IOS XE Software contains a vulnerability when used on a device that has Multiprotocol Label Switching with Traffic Engineering MPLS-TE enabled. Successful exploitation of the vulnerability could allow an unauthenticate...

PT-2013-2913

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 15.0 through 15.2 Cisco IOS XE versions 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S Description The vulnerability in the RSVP protocol implementation allows remote attackers to cause ...

Cisco Security Advisory: Cisco IOS Software RSVP Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software RSVP Denial of Service Vulnerability Advisory ID: cisco-sa-20120328-rsvp Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT +---------------------------------------------------------------------...

Cisco IOS Software RSVP Denial of Service Vulnerability (cisco-sa-20120328-rsvp)

Cisco IOS Software and Cisco IOS XE Software contain a vulnerability in the RSVP feature when used on a device configured with VPN routing and forwarding VRF instances. An unauthenticated, remote attacker can exploit this to cause an interface wedge, which can lead to loss of connectivity, loss o...

CVE-2012-1311

The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service interface queue wedge and service outage via crafted RSVP packets, aka Bug ID CSCts80643...

Design/Logic Flaw

The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service interface queue wedge and service outage via crafted RSVP packets, aka Bug ID CSCts80643...

CVE-2012-1311

CVE-2012-1311 concerns Cisco IOS Software and IOS XE with RSVP enabled on VRF configurations. Affected releases include Cisco IOS 15.0/15.1 and IOS XE 3.2.xS–3.4.xS (pre-3.4.2S). A remote, unauthenticated attacker can craft RSVP packets to trigger an interface queue wedge, causing loss of connect...

CVE-2012-1311

The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service interface queue wedge and service outage via crafted RSVP packets, aka Bug ID CSCts80643...

CVE-2012-1311: Undefined Security Weakness

The RSVP feature in Cisco IOS 15.0 and 15.1 and IOS XE 3.2.xS through 3.4.xS before 3.4.2S, when a VRF interface is configured, allows remote attackers to cause a denial of service interface queue wedge and service outage via crafted RSVP packets, aka Bug ID CSCts80643...

Cisco IOS Software RSVP Denial of Service Vulnerability

Cisco IOS Software and Cisco IOS XE Software contain a vulnerability in the RSVP feature when used on a device configured with VPN routing and forwarding VRF instances. This vulnerability could allow an unauthenticated, remote attacker to cause an interface wedge, which can lead to loss of...

PT-2012-1005

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 and 15.1 Cisco IOS XE versions 3.2.xS through 3.4.xS before 3.4.2S Description The vulnerability in the RSVP feature of Cisco IOS and IOS XE Software, when used on a device configured with VPN routing and forwarding VRF...

Cisco IOS User Datagram Protocol Delivery Issue For IPv4/IPv6 Dual-stack Routers - Cisco Systems

A device running Cisco IOS software that has Internet Protocol version 6 IPv6 enabled may be subject to a denial of service DoS attack. For the device to be affected by this vulnerability the device also has to have certain Internet Protocol version 4 IPv4 User Datagram Protocol UDP services...

Cisco IOS双栈路由器IPv6拒绝服务漏洞

BUGTRAQ ID: 28461 CVECAN ID: CVE-2008-1153 Cisco IOS是思科网络设备中所使用的互联网操作系统。 运行Cisco IOS软件的设备如果启用了IPv6，就会受拒绝服务攻击影响。设备必须还要启用了IPv4 UDP服务才会受这个漏洞影响。如果要利用这个漏洞，攻击IPv6报文必须指向设备，通过路由器路由的报文不会触发这个漏洞。成功利用这个漏洞可能导致以下情况之一： 1. 如果接口上配置了RSVP服务则设备会崩溃。 2. 任何其他受影响的基于IPv4 UDP的服务会导致接口无法接收更多的通讯，仅有利用漏洞端口才会受影响。...

Debian DSA-1171-1 : ethereal - several vulnerabilities

Several remote vulnerabilities have been discovered in the Ethereal network scanner, which may lead to the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-4333 It was discovered that the Q.2391 dissector is vulnerable to...