PT-2015-1620 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.47 through 8.61.2 Description: The issue is related to the SNMP implementation and is caused by resource management errors. It allows a remote authenticated user to cause a denial of...

GarrettCom Magnum 6K and 10K Switches Remote Denial of Service Vulnerability

GarrettCom Magnum 6K and 10K Switches are managed switches from GarrettCom USA. A security vulnerability exists in the GarrettCom Magnum 6K and 10K Switches that allows remote attackers to exploit the vulnerability by submitting a special request to reload the device, resulting in a denial of...

CVE-2015-4205

Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service NPU chip reset or line-card reload by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959...

Design/Logic Flaw

Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service NPU chip reset or line-card reload by sending crafted IEEE 802.3x flow-control PAUSE frames on the local network, aka Bug ID CSCut19959...

CVE-2015-4205

CVE-2015-4205 affects Cisco IOS XR 5.3.1 on ASR 9000 devices. The issue stems from improper flow-control (IEEE 802.3x) PAUSE frame processing, allowing an unauthenticated adjacent attacker to cause a denial of service via NPU chip reset or line-card reload. Impact is a DoS affecting availability ...

Cisco IOS XR Software Denial of Service Vulnerability (CNVD-2015-03854)

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in the IPv6 processing code of Cisco IOS XR Software allows an unauthenticated, remote attacker to exploit this vulnerability to cause a line card reload,...

CVE-2015-0776

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

Code injection

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

Code injection

The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authenticated users to cause a denial of service device reload by sending a crafted message during IPsec tunnel setup, aka Bug ID CSCur70505...

Cisco Catalyst 6500 Series Switches IPsec Tunnel Handling Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange IKE subsystem of the Cisco WS-IPSEC-3 service module could allow an authenticated, remote attacker to cause a reload of the Catalyst switch. The vulnerability is due to insufficient bounds checks on a specific message during the establishment of an IPs...

CVE-2015-0722

The network drivers in Cisco TelePresence T, Cisco TelePresence TE, and Cisco TelePresence TC before 7.3.2 allow remote attackers to cause a denial of service process restart or device reload via a flood of crafted IP packets, aka Bug ID CSCuj68952...

Cisco Wide Area Application Services (WAAS) SMB Handling Remote Denial of Service Vulnerability

Cisco Wide Area Application Services is a comprehensive WAN optimization solution that improves application performance in WAN environments, delivers video to branch offices and locally hosts branch office IT services. A security vulnerability exists in Cisco Wide Area Application Services that...

SUSE SLES10 Security Update : OpenSSL (SUSE-SU-2014:0539-1)

OpenSSL has been updated to fix an attack on ECDSA Nonces. Using the FLUSH+RELOAD Cache Side-channel Attack the Nonces could be recovered. CVE-2014-0076 The update also enables use of SHA-2 family certificate verification of X.509 certificates used in todays SSL certificate infrastructure. Note...

Cisco IOS XE Software Overlay Transport Virtualization (OTV) DoS

The remote Cisco device is affected by a denial of service vulnerability due to improper processing of oversized Overlay Transport Virtualization OTV frames. An unauthenticated, adjacent attacker can exploit this, by sending a large number of oversized OTV frames requiring fragmentation and...

CVE-2015-0731

The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service device reload via malformed Q931 SETUP messages, aka Bug ID CSCut37890...

Code injection

The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service device reload via malformed Q931 SETUP messages, aka Bug ID CSCut37890...

CVE-2015-0731

The ISDN implementation in Cisco IOS 15.3S allows remote attackers to cause a denial of service device reload via malformed Q931 SETUP messages, aka Bug ID CSCut37890...

Cisco Wide Area Application Services Server Message Block Protocol Module Denial of Service Vulnerability

A vulnerability in the Server Message Block Protocol SMB module of Cisco Wide Area Application Services WAAS could allow an unauthenticated, remote attacker to cause a reload of the SMB module. The vulnerability is due to improper input validation. An attacker could exploit this vulnerability by...

Unspecified Denial of Service Vulnerability in Cisco Wireless LAN Controller

The Cisco Wireless LAN Controller is used to manage application devices for Cisco Aironet access points using the Lightweight Access Point Protocol LWAPP. Cisco Wireless LAN Controller handles certain values with a security vulnerability that allows an attacker to exploit the vulnerability by...

Cisco IOS XE Overlay Transport Virtualization Denial of Service Vulnerability

Cisco IOS XE is an operating system developed by the American company Cisco Cisco for its network equipment. A security vulnerability exists in the Overlay Transport Virtualization OTV implementation of Cisco IOS XE version 3.10S. A remote attacker could exploit this vulnerability to cause a deni...