CVE-2013-1167

CVE-2013-1167 affects Cisco IOS XE on 1000 Series ASR routers: versions 3.2–3.4 before 3.4.2S and 3.5, with bridge domain interface (BDI) enabled. A remote attacker can trigger a denial of service (card reload) by sending packets that are mishandled during encapsulation processing, per Bug ID CSC...

CVE-2013-1164

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 multicast packets, aka Bug...

CVE-2013-1164

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1164 due to improper implementation of the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, enabling remote attackers to trigger a DoS (card reload) via fragmented IPv6 multicast packets. Affected versions include 3.4 before ...

CVE-2013-1166

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

CVE-2013-1165

Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR allows remote attackers to cause a denial of service card reload by sending many crafted L2TP packets, aka Bug ID CSCtz23293...

CVE-2013-2779

CVE-2013-2779 affects Cisco IOS XE on 1000‑series ASR: MLRE flaw that allows remote DoS via fragmented IPv6 MVPN/MVPNv6 packets. Vulnerable in IOS XE 3.4 before 3.4.5S and 3.5–3.7 before 3.7.1S; fix released in 3.4.5S and 3.7.1S/series guidance per advisory. Affected products and specific compone...

CVE-2013-2779

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 MVPN...

CVE-2013-1165

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1165. The issue, tracked as Bug CSCtz23293, allows an unauthenticated, remote attacker to trigger a denial of service (card reload) by sending many crafted L2TP packets. Affected software lines are IOS XE 2.x and 3.x before 3.4.5S, a...

CVE-2013-1143

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service incorrect memory access and device reload via a traffic...

Design/Logic Flaw

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service incorrect memory access and device reload via a traffic...

CVE-2013-1143

CVE-2013-1143 describes a denial-of-service vulnerability in the RSVP implementation of Cisco IOS (12.2; 15.0–15.2) and IOS XE (3.1.xS–3.7.xS), triggered when MPLS-TE is enabled. A malformed RSVP PATH message can cause incorrect memory access, leading to a device reload and DoS condition. The iss...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (cisco-sa-20120926-sip)

A vulnerability exists in the Session Initiation Protocol SIP implementation in Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to cause an affected device to reload. Affected devices must be configured to process SIP messages and for pass-through...

Code injection

The DHCPv6 server in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x, 3.1.xS before 3.1.4S, 3.1.xSG and 3.2.xSG before 3.2.5SG, 3.2.xS, 3.2.xXO, 3.3.xS, and 3.3.xSG before 3.3.1SG allows remote attackers to cause a denial of service device reload via a malformed...

CVE-2012-4622

The CVE-2012-4622 entry concerns Cisco Catalyst 4500E switches with Supervisor Engine 7L-E. A vulnerability in Cisco IOS XE 03.02.00.XO.15.0(2)XO on these devices allows remote attackers to trigger uncorrected ECC errors and cause a DoS by sending specially crafted/malformed packets, potentially ...

CVE-2012-4622

Cisco IOS XE 03.02.00.XO.15.02XO on Catalyst 4500E series switches, when a Supervisor Engine 7L-E card is installed, allows remote attackers to cause a denial of service card reload via malformed packets that trigger uncorrected ECC error messages, aka Bug ID CSCty88456...

CVE-2012-4617

The CVE-2012-4617 issue affects Cisco IOS, IOS XE, and IOS XR BGP implementations. A vulnerability exists where a router can be driven to a DoS by processing a malformed BGP attribute received from a peer on an existing BGP session, triggering multiple connection/session resets. The affected prod...

Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability

A vulnerability exists in the Session Initiation Protocol SIP implementation in Cisco IOS Software and Cisco IOS XE Software that could allow an unauthenticated, remote attacker to cause an affected device to reload. Affected devices must be configured to process SIP messages and for pass-through...

Code injection

Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service segmentation fault and device crash via unspecified vectors, aka Bug ID CSCtq61128...

CVE-2011-4007

Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service device crash via network traffic that triggers 1 fragmentation or 2 reassembly, aka Bug ID CSCtr56576...

Cisco IOS Software RSVP Denial of Service Vulnerability (cisco-sa-20120328-rsvp)

Cisco IOS Software and Cisco IOS XE Software contain a vulnerability in the RSVP feature when used on a device configured with VPN routing and forwarding VRF instances. An unauthenticated, remote attacker can exploit this to cause an interface wedge, which can lead to loss of connectivity, loss o...