CVE-2014-2183

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

CVE-2014-2182

Cisco Adaptive Security Appliance ASA Software, when DHCPv6 replay is configured, allows remote attackers to cause a denial of service device reload via a crafted DHCPv6 packet, aka Bug ID CSCun45520...

CVE-2014-2183

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

PT-2014-4539 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software affected versions not specified Description: A denial of service issue exists, allowing remote attackers to cause a device reload via a crafted DHCPv6 packet when DHCPv6 replay is configured. Thi...

Code injection

Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service device reload via crafted 1 broadcast or 2 multicast ICMP packets with fragmentation, aka Bug ID CSCub55948...

CVE-2012-5017

Cisco IOS before 15.11SY1 allows remote authenticated users to cause a denial of service device reload by establishing a VPN session and then sending malformed IKEv2 packets, aka Bug ID CSCub39268...

CVE-2012-5037

The ACL implementation in Cisco IOS before 15.11SY on Catalyst 6500 and 7600 devices allows local users to cause a denial of service device reload via a "no object-group" command followed by an object-group command, aka Bug ID CSCts16133...

Code injection

Cisco IOS before 15.11SY on ASR 1000 devices, when Multicast Listener Discovery MLD tracking is enabled for IPv6, allows remote attackers to cause a denial of service device reload via crafted MLD packets, aka Bug ID CSCtz28544...

CVE-2012-1366

Cisco IOS before 15.11SY on ASR 1000 devices, when Multicast Listener Discovery MLD tracking is enabled for IPv6, allows remote attackers to cause a denial of service device reload via crafted MLD packets, aka Bug ID CSCtz28544...

VMware Fusion 6.x < 6.0.3 OpenSSL Library Multiple Vulnerabilities (VMSA-2014-0004) (Heartbleed)

The version of VMware Fusion 6.x installed on the remote Mac OS X host is prior to 6.0.3. It is, therefore, reportedly affected by the following vulnerabilities in the OpenSSL library : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm ECDSA that...

VMware Workstation 10.x < 10.0.2 OpenSSL Library Multiple Vulnerabilities (VMSA-2014-0004) (Linux) (Heartbleed)

The installed version of VMware Workstation 10.x is prior to 10.0.2. It is, therefore, reportedly affected by the following vulnerabilities in the OpenSSL library : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm ECDSA that could allow nonce...

VMware Player 6.x < 6.0.2 OpenSSL Library Multiple Vulnerabilities (VMSA-2014-0004) (Linux) (Heartbleed)

The installed version of VMware Player 6.x running on Linux is prior to 6.0.2. It is, therefore, reportedly affected by the following vulnerabilities in the OpenSSL library : - An error exists related to the implementation of the Elliptic Curve Digital Signature Algorithm ECDSA that could allow...

Cisco Network Registrar DHCPv6 Denial of Service Vulnerability

A vulnerability in the DHCPv6 server module of Cisco Network Registrar could allow an unauthenticated, remote attacker to cause a reload of the DHCPv6 server on an affected device. The vulnerability is due to the way certain malformed requests are processed. An attacker could exploit this...

CVE-2014-2129

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

Code injection

The SIP inspection engine in Cisco Adaptive Security Appliance ASA Software 8.2 before 8.25.48, 8.4 before 8.46.5, 9.0 before 9.03.1, and 9.1 before 9.12.5 allows remote attackers to cause a denial of service memory consumption or device reload via crafted SIP packets, aka Bug ID CSCuh44052...

PT-2014-1323 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 before 8.25.48 Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.46.5 Cisco Adaptive Security Appliance ASA Software versions 9.0 before 9.03.1 Cisco Adaptive...

Updated openssl package fix two security vulnerabilities

Updated openssl packages fix security vulnerability: The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack...

Cisco IOS Software High Priority Queue Denial of Service Vulnerability

A vulnerability in the packet driver code of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a reload of the affected device, resulting in a denial of service DoS condition. The vulnerability is due to how the packet driver code handles packets that belong to protocols...

CVE-2014-2109

The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...

Design/Logic Flaw

The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service memory consumption or device reload via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494...