Cisco Adaptive Security Appliances Software Denial of Service Vulnerability (CNVD-2016-10125)

Cisco Adaptive Security Appliances ASA, Adaptive Security Appliances Software is a set of operating systems running in firewalls from the U.S. company Cisco Cisco. A denial of service vulnerability exists in Cisco ASA Software versions 9.0 and below. A remote attacker could exploit this...

Buffer Overflow Vulnerability in Identity Firewall Feature of Cisco ASA Software

Cisco Adaptive Security Appliance ASA, Adaptive Security Appliance is a set of firewall appliances from the American company Cisco Cisco. The appliance also includes IPS Intrusion Prevention System, SSL VPN, IPSec VPN, anti-spam and other features. A buffer overflow vulnerability exists in the...

Cisco ASA Software Local Certificate Authority Denial of Service Vulnerability (cisco-sa-20161019-asa-ca)

A vulnerability in the local Certificate Authority CA feature of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...

Cisco ASA Software Local Certificate Authority Denial of Service Vulnerability

A vulnerability in the local Certificate Authority CA feature of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to improper handling of crafted packets during the enrollment operation. An attacker could exploit...

PT-2016-6905 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco ASA Software versions prior to 9.61.5 Description: A vulnerability in the local Certificate Authority CA feature could allow an unauthenticated, remote attacker to cause a reload of the affected system. The issue is due to improper...

PT-2016-6906 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco ASA Software versions prior to 9.62.1 Description: A buffer overflow in the Identity Firewall feature could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerabilit...

CVE-2016-8667

The rc4030write function in hw/dma/rc4030.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service divide-by-zero error and QEMU process crash via a large interval timer reload value...

Cisco Nexus 7000/7700 OTV Buffer Overflow Vulnerability

Cisco Nexus 7000 Series Switches is a modular data center-class product family. A security vulnerability exists in the OTV GRE implementation of the Cisco Nexus 7000/7700 Series Switches. A remote attacker could exploit the vulnerability to reload the affected system or remotely execute arbitrary...

Command injection

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service device reload by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and...

Cisco IOS IKEv2 Denial of Service Vulnerability (cisco-sa-20161005-ios-ikev)

A vulnerability in the Internet Key Exchange version 2 IKEv2 code of Cisco IOS could allow an unauthenticated, remote attacker to cause a reload of the affected device. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...

CVE-2016-6380

The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service data corruption or device reload via a crafted DNS response, aka Bug ID CSCup90532...

CVE-2016-6379

Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service device reload via crafted IP Detail Record IPDR packets, aka Bug ID CSCuu35089...

Memory corruption

The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service data corruption or device reload via a crafted DNS response, aka Bug ID CSCup90532...

Code injection

The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service device reload via a failed SSH connection attempt that is mishandled during generation of an error-log message, aka Bug ID CSCuy87667...

CVE-2016-6393

The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service device reload via a failed SSH connection attempt that is mishandled during generation of an error-log message, aka Bug ID CSCuy87667...

CVE-2016-6423

The IKEv2 client and initiator implementations in Cisco IOS 15.53M and IOS XE allow remote IKEv2 servers to cause a denial of service device reload via crafted IKEv2 packets, aka Bug ID CSCux97540...

CVE-2016-6386

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service data-structure corruption and device reload via fragmented IPv4 packets, aka Bug ID CSCux66005...

Design/Logic Flaw

Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service memory consumption or device reload via fragmented IKEv1 packets, aka Bug ID CSCuy47382...

CVE-2016-6381

Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service memory consumption or device reload via fragmented IKEv1 packets, aka Bug ID CSCuy47382...

Memory corruption

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service data-structure corruption and device reload via fragmented IPv4 packets, aka Bug ID CSCux66005...