CVE-2013-1164

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 multicast packets, aka Bug...

CVE-2013-1165

Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR allows remote attackers to cause a denial of service card reload by sending many crafted L2TP packets, aka Bug ID CSCtz23293...

CVE-2013-1166

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

CVE-2013-1167

CVE-2013-1167 affects Cisco IOS XE on 1000 Series ASR routers: versions 3.2–3.4 before 3.4.2S and 3.5, with bridge domain interface (BDI) enabled. A remote attacker can trigger a denial of service (card reload) by sending packets that are mishandled during encapsulation processing, per Bug ID CSC...

CVE-2013-1164

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1164 due to improper implementation of the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, enabling remote attackers to trigger a DoS (card reload) via fragmented IPv6 multicast packets. Affected versions include 3.4 before ...

CVE-2013-2779

CVE-2013-2779 affects Cisco IOS XE on 1000‑series ASR: MLRE flaw that allows remote DoS via fragmented IPv6 MVPN/MVPNv6 packets. Vulnerable in IOS XE 3.4 before 3.4.5S and 3.5–3.7 before 3.7.1S; fix released in 3.4.5S and 3.7.1S/series guidance per advisory. Affected products and specific compone...

CVE-2013-1165

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1165. The issue, tracked as Bug CSCtz23293, allows an unauthenticated, remote attacker to trigger a denial of service (card reload) by sending many crafted L2TP packets. Affected software lines are IOS XE 2.x and 3.x before 3.4.5S, a...

CVE-2013-2779

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 MVPN...

CVE-2013-2779: Improper Input Validation

Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 MVPN...

PT-2013-3923

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.4 through 3.4.4S Cisco IOS XE versions 3.5 through 3.7 before 3.7.1S Description The issue is related to the improper implementation of the Cisco Multicast Leaf Recycle Elimination MLRE feature in Cisco IOS XE, allowing...

PT-2013-2935

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.2 through 3.4 before 3.4.2S, and 3.5 Description The issue allows remote attackers to cause a denial of service card reload via packets that are not properly handled during the processing of encapsulation when bridge...

CVE-2013-1167: Improper Limitation of a Pathname to a Restricted Directory

Cisco IOS XE 3.2 through 3.4 before 3.4.2S, and 3.5, on 1000 series Aggregation Services Routers ASR, when bridge domain interface BDI is enabled, allows remote attackers to cause a denial of service card reload via packets that are not properly handled during the processing of encapsulation, aka...

PT-2013-2933

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 2.x through 3.7 before 3.7.1S Description The issue allows remote attackers to cause a denial of service by sending many crafted L2TP packets. Successful exploitation could trigger a reload of the Embedded Services...

CVE-2013-1165: Improper Input Validation

Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR allows remote attackers to cause a denial of service card reload by sending many crafted L2TP packets, aka Bug ID CSCtz23293...

PT-2013-2932

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.4 through 3.4.4S Cisco IOS XE version 3.5 Cisco IOS XE version 3.6 Description The issue is related to the improper implementation of the Cisco Multicast Leaf Recycle Elimination MLRE feature in Cisco IOS XE, allowing...

CVE-2013-1164: Undefined Security Weakness

Cisco IOS XE 3.4 before 3.4.4S, 3.5, and 3.6 on 1000 series Aggregation Services Routers ASR does not properly implement the Cisco Multicast Leaf Recycle Elimination MLRE feature, which allows remote attackers to cause a denial of service card reload via fragmented IPv6 multicast packets, aka Bug...

PT-2013-2934

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.2 through 3.4 before 3.4.5S Cisco IOS XE versions 3.5 through 3.7 before 3.7.1S Description The issue allows remote attackers to cause a denial of service card reload by sending many SIP packets when VRF-aware NAT and S...

CVE-2013-1166: Improper Input Validation

Cisco IOS XE 3.2 through 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers ASR, when VRF-aware NAT and SIP ALG are enabled, allows remote attackers to cause a denial of service card reload by sending many SIP packets, aka Bug ID CSCuc65609...

CVE-2013-1143

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service incorrect memory access and device reload via a traffic...

Design/Logic Flaw

The RSVP protocol implementation in Cisco IOS 12.2 and 15.0 through 15.2 and IOS XE 3.1.xS through 3.4.xS before 3.4.5S and 3.5.xS through 3.7.xS before 3.7.2S, when MPLS-TE is enabled, allows remote attackers to cause a denial of service incorrect memory access and device reload via a traffic...