Race condition

A vulnerability in the implementation of the Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of a BGP update message that contains a...

CVE-2019-16027 Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability

A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition in the ISIS process. The vulnerability is due to improper...

CVE-2019-16027 Cisco IOS XR Software Intermediate System–to–Intermediate System Denial of Service Vulnerability

A vulnerability in the implementation of the Intermediate SystemtoIntermediate System ISIS routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition in the ISIS process. The vulnerability is due to improper...

CVE-2019-16022 Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities

Multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to incorrect processing of BGP update...

CVE-2019-16022

Cisco IOS XR Software contains DoS vulnerabilities in the BGP EVPN implementation. Malformed BGP EVPN update attributes can cause the BGP process to restart, yielding a DoS. Exploitation requires an unauthenticated remote attacker to send crafted EVPN attributes from a configured/valid BGP peer o...

CVE-2019-16020

CVE-2019-16020 relates to multiple DoS vulnerabilities in Cisco IOS XR’s BGP EVPN feature. The issues arise from incorrect processing of BGP update messages that carry crafted EVPN attributes, allowing an unauthenticated, remote attacker to cause the BGP process to restart and trigger a DoS condi...

CVE-2019-16020 Cisco IOS XR Software BGP EVPN Denial of Service Vulnerabilities

Multiple vulnerabilities in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerabilities are due to incorrect processing of BGP update...

CVE-2019-16018 Cisco IOS XR Software EVPN Operational Routes Denial of Service Vulnerability

A vulnerability in the implementation of Border Gateway Protocol BGP Ethernet VPN EVPN functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of a BGP update message that...

CVE-2019-16018

Cisco IOS XR Software EVPN BGP operational routes vulnerability (CVE-2019-16018) allows unauthenticated remote DoS through crafted BGP EVPN update messages that trigger BGP process restart. Affected component: BGP EVPN handling in IOS XR; impact is DoS (availability) with no confidentiality/integ...

CVE-2019-15989

CVE-2019-15989 affects Cisco IOS XR Software where BGP update messages with a specific malformed attribute can crash the BGP process, causing DoS. Exploitation requires a message from an allowed peer or injection over an existing BGP TCP session. Cisco has released software updates to address thi...

CVE-2019-15989 Cisco IOS XR Software Border Gateway Protocol Attribute Denial of Service Vulnerability

A vulnerability in the implementation of the Border Gateway Protocol BGP functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of a BGP update message that contains a...

Cisco IOS XR BGP EVPN Denial of Service Vulnerability (CNVD-2020-04037)

Cisco IOS XR is a fully modular and fully distributed network interconnect operating system. A denial of service vulnerability exists in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN feature in Cisco IOS XR 6.6.1 and later. The vulnerability stems from improper handling ...

Cisco IOS XR Denial of Service Vulnerability (CNVD-2020-04053)

Cisco IOS XR is a fully modular and fully distributed network interconnect operating system. A denial of service vulnerability exists in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN feature in Cisco IOS XR 6.6.1 and later. The vulnerability stems from improper handling ...

Cisco IOS XR BGP EVPN Denial of Service Vulnerability (CNVD-2020-07196)

Cisco IOS XR is a fully modular and fully distributed network interconnect operating system. A denial of service vulnerability exists in the implementation of the Border Gateway Protocol BGP Ethernet VPN EVPN feature in Cisco IOS XR 6.6.1 and later. The vulnerability stems from improper handling ...

Cisco IOS XR IS-IS Denial of Service Vulnerability

Cisco IOS XR is a fully modular and fully distributed network interconnect operating system. A denial-of-service vulnerability exists in the Intermediate System-to-Intermediate System IS-IS routing protocol function in Cisco IOS XR versions prior to 6.6.3, 7.0.2, 7.1.1, and 7.2.1. The vulnerabili...

Cisco IOS XR Software Intermediate System-to-Intermediate System Denial of Service Vulnerability

A vulnerability in the implementation of the Intermediate System-to-Intermediate System IS-IS routing protocol functionality in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition in the IS-IS process. The vulnerability is due to improper...

The vulnerability of the NETCONF protocol implementation in the Cisco IOS XR operating system allows a attacker to compromise the integrity of the protected information.

The vulnerability of the NETCONF protocol implementation in the Cisco IOS XR operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1

Platform update for Windows 7 SP1 and Windows Server 2008 R2 SP1 Summary This article describes a platform update for Windows 7 Service Pack 1 SP1 and Windows Server 2008 R2 SP1. This update improves the range and performance of the following graphics and imaging components: Direct2D DirectWrite...

CVE-2019-15998

A vulnerability in the access-control logic of the NETCONF over Secure Shell SSH of Cisco IOS XR Software may allow connections despite an access control list ACL that is configured to deny access to the NETCONF over SSH of an affected device. The vulnerability is due to a missing check in the...

CVE-2019-15998

A vulnerability in the access-control logic of the NETCONF over Secure Shell SSH of Cisco IOS XR Software may allow connections despite an access control list ACL that is configured to deny access to the NETCONF over SSH of an affected device. The vulnerability is due to a missing check in the...