Memory corruption

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service data-structure corruption and device reload via fragmented IPv4 packets, aka Bug ID CSCux66005...

Design/Logic Flaw

Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service memory consumption or device reload via fragmented IKEv1 packets, aka Bug ID CSCuy47382...

CVE-2016-6381

Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service memory consumption or device reload via fragmented IKEv1 packets, aka Bug ID CSCuy47382...

CVE-2016-6384

Cisco IOS 12.2 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.17 and 16.2 allow remote attackers to cause a denial of service device reload via crafted fields in an H.323 message, aka Bug ID CSCux04257...

CVE-2016-6381

CVE-2016-6381 affects Cisco IOS and IOS XE software's IKEv1 fragmentation handling. The issue allows unauthenticated, remote attackers to cause a denial of service by exhausting memory or triggering a device reload through specially crafted fragmented IKEv1 packets. Affected versions include IOS ...

CVE-2016-6381

Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service memory consumption or device reload via fragmented IKEv1 packets, aka Bug ID CSCuy47382...

Cisco IOS and IOS XE IKEv2 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 2 IKEv2 code of Cisco IOS and IOS XE could allow an unauthenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to improper handling of crafted IKEv2 packets. The vulnerability applies only to IKEv2 devic...

Cisco NX-OS Border Gateway Protocol Denial of Service Vulnerability

A vulnerability in the Border Gateway Protocol BGP implementation of Cisco NX-OS System Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the device unexpectedly reloading. The vulnerability is due to incomplete input validation of the BGP...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2016-08390)

Cisco IOS XE is an operating system developed by Cisco for its network devices.Network Address Translation NAT is one of the network address translation functions. A denial of service vulnerability exists in the implementation of the NAT feature in Cisco IOS XE Software. A remote attacker could...

Cisco IOS XE Software IP Fragment Reassembly Denial of Service Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco for its network devices. A denial of service vulnerability exists in the IP Fragment Reassembly feature of Cisco IOS XE Software. A remote attacker can exploit this vulnerability by sending specially crafted IPv4 fragment packets to...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08394)

Cisco IOS and IOS XE Software are both operating systems developed by Cisco for its network devices.Authentication, Authorization and Accounting AAA is one of these modules that is used to process requests for computer resources and users and provide authentication, authorization, and authorizati...

Cisco IOS Software DNS Forwarder Denial of Service Vulnerability (cisco-sa-20160928-dns)

A vulnerability in the DNS forwarder functionality of Cisco IOS could allow an unauthenticated, remote attacker to cause the device to reload, corrupt the information present in the device SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced source...

Cisco IOS Software IP Detail Record Denial of Service Vulnerability (cisco-sa-20160928-ipdr)

A vulnerability in the IP Detail Record IPDR code of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected system to reload. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Cisco IOS XE Software Internet Key Exchange Version 1 Fragmentation Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 1 IKEv1 fragmentation code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an exhaustion of available memory or a reload of the affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2016-08395)

Cisco IOS and IOS XE Software are operating systems developed by Cisco for its network devices.Internet Key Exchange version 1 IKEv1 Fragmentation is one of the protocols used to set up security associations SAs in the IPsec protocol suite. . A denial of service vulnerability exists in IKEv1...

Cisco IOS/IOS multicast subsystem denial of service vulnerability (CNVD-2016-08398)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A denial of service vulnerability exists in Cisco IOS/IOS XE Software in the multicast subsystem. Exploitation of this vulnerability by an unauthenticated, remote attacker could resu...

Cisco IOS and IOS XE Software IP Detail Record Denial of Service Vulnerability

A vulnerability in the IP Detail Record IPDR code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected system to reload. The vulnerability is due to improper handling of IPDR packets. An attacker could exploit this vulnerability by sending crafted...

Cisco IOS and IOS XE Software DNS Forwarder Denial of Service Vulnerability

A vulnerability in the DNS forwarder functionality of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, corrupt the information present in the device's local DNS cache, or read part of the process memory. The vulnerability is due to a fla...

Cisco Carrier Routing System Denial of Service Vulnerability

The Cisco Carrier Routing System CRS is a carrier-grade routing system from Cisco. A denial of service vulnerability exists in Cisco CRS versions 5.1 and 5.1.4 on CRS Carrier Grade Services for CRS-1 and CRS-3 devices. A remote attacker could exploit this vulnerability by sending specially crafte...

CVE-2016-6401

Cisco Carrier Routing System CRS 5.1 and 5.1.4, as used in CRS Carrier Grade Services for CRS-1 and CRS-3 devices, allows remote attackers to cause a denial of service line-card reload via crafted IPv6-over-MPLS packets, aka Bug ID CSCva32494...