Code injection

The high-speed logging HSL feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via large IP packets that require NAT and H...

Code injection

AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service device reload via a crafted TCP packet, aka Bug ID...

Design/Logic Flaw

The Layer 4 Redirect L4R feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via malformed 1 IPv4 or 2 IPv6 packets, aka B...

CVE-2015-0635

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority ANRA responses, and consequently bypass intended device and...

CVE-2015-0643

Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service memory consumption and device reload by...

CVE-2015-0640

The high-speed logging HSL feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via large IP packets that require NAT and H...

CVE-2015-0646

CVE-2015-0646 affects Cisco IOS and IOS XE: memory leak in the TCP input module during TCP handshake. Affected releases include IOS 12.2, 12.4, 15.0, 15.2, 15.3, 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3.10.xS before 3.10.5S, and 3.11.xS and 3.12.xS before 3.12.3S. An unauthentica...

CVE-2015-0640

CVE-2015-0640 affects Cisco IOS XE where the High-Speed Logging (HSL) feature mishandles fragmented IP packets, allowing an unauthenticated remote attacker to cause a DoS with device reloads by sending oversized packets after fragmentation. Affected are IOS XE 2.x and 3.x releases (per Bug CSCuo2...

CVE-2015-0636

The Cisco ANI issue affects the Autonomic Networking Infrastructure in Cisco IOS and IOS XE. The vulnerability allows unauthenticated remote attackers to cause Denial of Service by sending spoofed Autonomic Networking (AN) messages that reset the finite state machine, disrupting domain access. Af...

CVE-2015-0644

AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service device reload via a crafted TCP packet, aka Bug ID...

CVE-2015-0650

Cisco IOS/IOS XE mDNS Gateway DoS (CVE-2015-0650): A vulnerability arising from improper validation of mDNS gateway UDP packets (port 5353) in Cisco IOS 12.2–12.4, 15.0–15.4 and IOS XE 3.9.xS–3.13.xS (before specific fixed versions 3.10.4S, 3.11.3S, 3.12.2S, 3.13.1S). An unauthenticated remote at...

CVE-2015-0641

Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via crafted IPv6 packets, aka Bug ID CSCub68073...

CVE-2015-0639

The Common Flow Table CFT feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S, when MMON or NBAR is enabled, allows remote attacker...

CVE-2015-0643

CVE-2015-0643 relates to Cisco IOS/IOS XE IKEv2 handling that allows a remote, unauthenticated attacker to cause a DoS by sending malformed IKEv2 packets. Affected software includes Cisco IOS 12.2, 12.4, 15.0–15.4 and IOS XE 2.5.x–3.13.xS (various sub-branches) prior to the indicated fixed builds...

CVE-2015-0641

CVE-2015-0641 affects Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S. The flaw arises from parsing IPv6 packets, allowing an unauthenticated, remote attacker to trigger a deni...

CVE-2015-0644

CVE-2015-0644 affects Cisco IOS XE AppNav. The vulnerability arises from improper handling of TCP packets, allowing an unauthenticated, remote attacker to cause either arbitrary code execution or a device reload (DoS) via a crafted TCP packet. Affected are IOS XE 3.8–3.10 before 3.10.3S, 3.11 bef...

CVE-2015-0645

Cisco IOS XE Layer 4 Redirect (L4R) DoS vulnerability affects IOS XE 2.x–3.x before certain fixed releases, where the L4R feature mishandles crafted IPv4/IPv6 packets. An unauthenticated, remote attacker can trigger a device reload by sending malformed traffic, per Bug ID CSCuq59131. Affected ran...

CVE-2015-0639

The CVE-2015-0639 issue is a DoS vulnerability in Cisco IOS XE Common Flow Table (CFT). When MMON or NBAR is enabled, processing of IPv6 packets encapsulated inside IPv4 UDP packets can be corrupted, allowing an unauthenticated, remote attacker to trigger a device reload. Affected products and ve...

CVE-2015-0642

CVE-2015-0642 affects Cisco IOS and IOS XE where the IKEv2 subsystem mishandles certain malformed packets, allowing unauthenticated remote DoS via IPv4/IPv6. Affected Cisco IOS versions include 12.2, 12.4, 15.0–15.4, and IOS XE across 2.5.x–3.12.xS (before 3.12.3S), 3.2.xE–3.7.xE (before 3.7.1E),...

KLA10510 Multiple vulnerabilities in Cisco IOS

An unspecified vulnerabilities were found in multiple versions of Cisco IOS. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packets or messages. Original advisories -...