Code injection

Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR allows remote attackers to cause a denial of service card reload by sending many crafted L2TP packets, aka Bug ID CSCtz23293...

Code injection

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 multicast packets, aka Bug...

Code injection

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

Code injection

Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers ASR, when bridge domain interface BDI is enabled, allows remote attackers to cause a denial of service card reload via packets that are not properly handled during the processing of encapsulation, aka...

Code injection

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 MVPN...

CVE-2013-1164

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1164 due to improper implementation of the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, enabling remote attackers to trigger a DoS (card reload) via fragmented IPv6 multicast packets. Affected versions include 3.4 before ...

CVE-2013-1167

CVE-2013-1167 affects Cisco IOS XE on 1000 Series ASR routers: versions 3.2–3.4 before 3.4.2S and 3.5, with bridge domain interface (BDI) enabled. A remote attacker can trigger a denial of service (card reload) by sending packets that are mishandled during encapsulation processing, per Bug ID CSC...

CVE-2013-1164

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 multicast packets, aka Bug...

CVE-2013-1165

Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR allows remote attackers to cause a denial of service card reload by sending many crafted L2TP packets, aka Bug ID CSCtz23293...

CVE-2013-1166

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

CVE-2013-1165

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1165. The issue, tracked as Bug CSCtz23293, allows an unauthenticated, remote attacker to trigger a denial of service (card reload) by sending many crafted L2TP packets. Affected software lines are IOS XE 2.x and 3.x before 3.4.5S, a...

CVE-2013-2779

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 MVPN...

CVE-2013-2779

CVE-2013-2779 affects Cisco IOS XE on 1000‑series ASR: MLRE flaw that allows remote DoS via fragmented IPv6 MVPN/MVPNv6 packets. Vulnerable in IOS XE 3.4 before 3.4.5S and 3.5–3.7 before 3.7.1S; fix released in 3.4.5S and 3.7.1S/series guidance per advisory. Affected products and specific compone...

CVE-2013-1143

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service incorrect memory access and device reload via a traffic...

Design/Logic Flaw

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service incorrect memory access and device reload via a traffic...

CVE-2013-1143

CVE-2013-1143 describes a denial-of-service vulnerability in the RSVP implementation of Cisco IOS (12.2; 15.0–15.2) and IOS XE (3.1.xS–3.7.xS), triggered when MPLS-TE is enabled. A malformed RSVP PATH message can cause incorrect memory access, leading to a device reload and DoS condition. The iss...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (cisco-sa-20120926-sip)

A vulnerability exists in the Session Initiation Protocol SIP implementation in Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to cause an affected device to reload. Affected devices must be configured to process SIP messages and for pass-through...

Code injection

The DHCPv6 server in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG and 3.2.xSG before 3.2.5SG, 3.2.xS, 3.2.xXO, 3.3.xS, and 3.3.xSG before 3.3.1SG allows remote attackers to cause a denial of service device reload via a malformed...

CVE-2012-4622

The CVE-2012-4622 entry concerns Cisco Catalyst 4500E switches with Supervisor Engine 7L-E. A vulnerability in Cisco IOS XE 03.02.00.XO.15.0(2)XO on these devices allows remote attackers to trigger uncorrected ECC errors and cause a DoS by sending specially crafted/malformed packets, potentially ...

CVE-2012-4622

Cisco IOS XE 03.02.00.XO.15.02XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service card reload via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456...