Cisco IOS XE VSS / BDF Traffic DoS (CSCug41049 / CSCue61890)

The remote Cisco device is affected by a denial of service vulnerability in its packet driver code when handling Virtual Switching Systems VSS or Bidirectional Forwarding Detection BFD traffic. An unauthenticated, adjacent attacker can exploit this to cause a device reload. Note that this issue...

CVE-2014-2183

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

CVE-2014-2183

The L2TP module in Cisco IOS XE 3.10S.2 and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service ESP card reload via a malformed L2TP packet, aka Bug ID CSCun09973...

CVE-2014-2183

The CVE-2014-2183 issue concerns Cisco IOS XE on ASR 1000 Series routers (3.10S(.2) and earlier). The L2TP module can be triggered by malformed L2TP packets over the network, causing a denial-of-service via ESP card reload. Exploitation requires authenticated access; impact is a reload of the ESP...

Cisco IOS XE Software IPv6 Denial of Service (cisco-sa-20140326-ipv6

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the IPv6 protocol stack. This issue exists due to improper handling of certain, unspecified types of IPv6 packets. An unauthenticated, remote attacker...

Cisco IOS XE Software Internet Key Exchange Version 2 (IKEv2) Denial of Service (cisco-sa-20140326-ikev2)

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the Internet Key Exchange Version 2 IKEv2 module. An unauthenticated, remote attacker could potentially exploit this issue by sending a malformed IKEv...

Cisco IOS Software and Cisco IOS XE Software IKE Main Mode Vulnerability

A vulnerability in the Internet Key Exchange IKE module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to delete established security associations on an affected device. The vulnerability is due to improper handling of rogue IKE Main Mode packets. ...

Cisco IOS/IOS XE IPv6数据包拒绝服务漏洞

Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS及IOS XE在处理IPv6数据包时存在错误，可导致内存资源耗尽，以及设备重载。 Cisco IOS XE 3.x Cisco已经为此发布了一个安全公告（cisco-sa-20140326-ipv6）以及相应补丁: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-ipv6...

Cisco IOS Software IK3v2模块拒绝服务漏洞

CVECAN ID: CVE-2014-2108 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS 12.2、15.0-15.3、IOS XE 3.2-3.7、3.8-3.10版本存在安全漏洞，远程攻击者通过特制的IKEv2数据包，利用此漏洞可造成拒绝服务（内存耗尽）。 0 Cisco IOS 15.x Cisco IOS 12.2 Cisco已经为此发布了一个安全公告（cisco-sa-20140326-ikev2）以及相应补丁:...

CVE-2014-2113

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service I/O memory consumption and device reload via a malformed IPv6 packet, aka Bug ID CSCui59540...

CVE-2014-2106

Cisco IOS 15.3M before 15.33M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCug45898...

CVE-2014-2108

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

Design/Logic Flaw

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service I/O memory consumption and device reload via a malformed IPv6 packet, aka Bug ID CSCui59540...

Design/Logic Flaw

Cisco IOS 15.3M before 15.33M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCug45898...

Design/Logic Flaw

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

CVE-2014-2106

CVE-2014-2106 affects Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S. A crafted SIP message may cause the device to reload (DoS) on unauthenticated remote access. The issue is documented in Cisco advisory cisco-sa-20140326-sip; affected versions and mitigation are provided by ...

CVE-2014-2106

Cisco IOS 15.3M before 15.33M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service device reload via crafted SIP messages, aka Bug ID CSCug45898...

CVE-2014-2108

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service device reload via a malformed IKEv2 packet, aka Bug ID CSCui88426...

CVE-2014-2113

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service I/O memory consumption and device reload via a malformed IPv6 packet, aka Bug ID CSCui59540...

CVE-2014-2113

CVE-2014-2113 affects Cisco IOS/IOS XE where IPv6 packet processing can trigger a DoS via I/O memory depletion. Affected are Cisco IOS 15.1–15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8–3.10 before 3.10.2S. The vulnerability is triggered by malformed IPv6 packets and can c...