Input validation

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS Software possibly 15.2 through 15.6 and Cisco IOS XE Software possibly 3.7 through 3.18, and 16 could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The...

CVE-2017-3850

A vulnerability in the Autonomic Networking Infrastructure ANI feature of Cisco IOS Software 15.4 through 15.6 and Cisco IOS XE Software 3.7 through 3.18, and 16 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incomplete inpu...

CVE-2017-3849

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS Software possibly 15.2 through 15.6 and Cisco IOS XE Software possibly 3.7 through 3.18, and 16 could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The...

Input validation

A vulnerability in the Autonomic Networking Infrastructure ANI feature of Cisco IOS Software 15.4 through 15.6 and Cisco IOS XE Software 3.7 through 3.18, and 16 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incomplete inpu...

CVE-2017-3850

Cisco IOS/IOS XE ANI IPv6 Denial of Service (CVE-2017-3850): An unauthenticated attacker can cause a DoS by sending crafted IPv6 packets to devices with ANI enabled and a reachable IPv6 interface. The issue stems from incomplete input validation in ANI; affected releases include IOS 15.4–15.6 and...

CVE-2017-3849: Improper Input Validation

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS Software possibly 15.2 through 15.6 and Cisco IOS XE Software possibly 3.7 through 3.18, and 16 could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The...

CVE-2017-3850: Improper Input Validation

A vulnerability in the Autonomic Networking Infrastructure ANI feature of Cisco IOS Software 15.4 through 15.6 and Cisco IOS XE Software 3.7 through 3.18, and 16 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incomplete inpu...

Cisco IOS XE Software IPv6 Denial of Service Vulnerability

A vulnerability in the Autonomic Networking Infrastructure ANI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources...

Cisco IOS XE Software Autonomic Networking Infrastructure Registrar Denial of Service Vulnerability

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

Cisco IOS and IOS XE Software Autonomic Networking Infrastructure Registrar Denial of Service Vulnerability

A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to incomplete input validation on certain crafted...

PT-2017-2020

Name of the Vulnerable Software and Affected Versions Cisco IOS Software versions 15.4 through 15.6 Cisco IOS XE Software versions 3.7 through 3.18, and 16 Description A vulnerability in the Autonomic Networking Infrastructure ANI feature could allow an unauthenticated, remote attacker to cause a...

PT-2017-16144

Name of the Vulnerable Software and Affected Versions Cisco IOS Software versions 15.2 through 15.6 Cisco IOS XE Software versions 3.7 through 3.18, and 16 Description A vulnerability in the Autonomic Networking Infrastructure ANI registrar feature could allow an unauthenticated, adjacent attacke...

Cisco IOS XE Software Cluster Management Protocol Remote Code Execution Vulnerability

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. SPDX-FileCopyrightText: 2017 Greenbone AG Some text...

CVE-2017-3881

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

CVE-2017-3881

CVE-2017-3881 is a Cisco IOS/IOS XE vulnerability in the Cluster Management Protocol (CMP) handling. Two factors enable exploitation: (1) CMP-specific Telnet options were not restricted to internal cluster communications and could be processed over any Telnet session; (2) malformed CMP-specific T...

CVE-2017-3881: Improper Input Validation

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

PT-2017-2891

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Routers affected versions not specified Description A vulnerability exists in the USB-modem code due to improper input validation of the platform usb modem command in t...

Code injection

Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives,...

CVE-2017-5682: Undefined Security Weakness

Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer and Collector, Intel Integrated Performance Primitives, Cryptography for Intel Integrated Performance Primitives,...

Intel PSET Application Install wrapper contains an escalation of privilege vulnerability.

Summary: Intel PSET Application Install wrapper contains an escalation of privilege vulnerability. Description: Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel Inspector, Intel Advisor, Intel MPI Library, Intel Trace Analyzer a...