Cisco IOS XR Software for NCS 6000 Series Devices OSPF Packet Processing Denial of Service Vulnerability (cisco-sa-20160914-iosxr)

A vulnerability in the OSPFv3 processing of Cisco IOS XR Software for Cisco Network Convergence System NCS 6000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the OSPFv3 process and result in a limited denial of service DoS condition on an affected device...

Cisco IOS XR NCS 6000 Packet Timer Leak DoS (cisco-sa-20160713-ncs6k)

The version of Cisco IOS XR running on the remote NCS 6000 device is affected by a denial of service vulnerability due to improper management of system timer resources. An unauthenticated, remote attacker can exploit this, via numerous management connections to the affected device, to consume...

Cisco Carrier Routing System IPv6 Denial of Service Vulnerability (cisco-sa-20160914-crs)

A vulnerability in IPv6 over MPLS packet processing of Cisco IOS XR for Cisco Carrier Routing System CRS platforms could allow an unauthenticated, adjacent attacker to cause a reload of the affected line card. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in several products. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...

Cisco IOS XR Software for NCS 6000 Series Devices OSPF Packet Processing Denial of Service Vulnerability

A vulnerability in the OSPFv3 processing of Cisco IOS XR Software for Cisco Network Convergence System NCS 6000 Series devices could allow an unauthenticated, remote attacker to cause a reload of the OSPFv3 process and result in a limited denial of service DoS condition on an affected device. The...

CVE-2016-6355

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service control-plane protocol outage via crafted fragmented packets, aka Bug ID CSCux26791...

Memory corruption

Memory leak in Cisco IOS XR 5.1.x through 5.1.3, 5.2.x through 5.2.5, and 5.3.x through 5.3.2 on ASR 9001 devices allows remote attackers to cause a denial of service control-plane protocol outage via crafted fragmented packets, aka Bug ID CSCux26791...

CVE-2016-6355

Cisco IOS XR vulnerability CVE-2016-6355 affects ASR 9001 devices, where memory leaks in the driver processing of incoming fragmented packets can cause a denial of service by dropping all control-plane protocols. Affected releases include IOS XR 5.1.x up to 5.1.3, 5.2.x up to 5.2.5, and 5.3.x up ...

Cisco IOS XR 5.1.x < 5.1.3 / 5.2.x < 5.2.4 / 5.3.x < 5.3.2 Fragmented Packet DoS (cisco-sa-20160810-iosxr)

The remote Cisco device is running a version of Cisco IOS XR that is 5.1.x prior to 5.1.3, 5.2.x prior to 5.2.4, or 5.3.x prior to 5.3.2. It is, therefore, affected by a denial of service vulnerability in the driver processing functions due to improper processing of fragmented packets. An...

Cisco IOS XR Software for Cisco ASR 9001 Aggregation Services Routers Fragmented Packet Denial of Service Vulnerability (cisco-sa-20160810-iosxr)

A vulnerability in the driver processing functions of Cisco IOS XR Software for Cisco ASR 9001 Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a memory leak on the route processor RP of an affected device, which could cause the device to drop all control-plan...

Cisco Releases Security Update

Cisco has released a security update to address a vulnerability in its IOS XR Software for ASR 9001 Aggregation Services Routers. Exploitation of this vulnerability could allow an remote attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to review the Cis...

Cisco IOS XR 6.0.1.x and 6.0.2.x < 6.0.2.7 / 6.1.x < 6.1.1.17 Command Input Handling Privilege Escalation

The version of Cisco IOS XR running on the remote device is 6.0.1.x or 6.0.2.x prior to 6.0.2.7, or 6.1.x prior to 6.1.1.17. It is, therefore, affected by a privilege escalation vulnerability in the command-line utility due to improper validation of user-supplied input. A local attacker can explo...

Cisco IOS XR Native OS Command Injection Vulnerability

Cisco IOS XR is the United States Cisco Cisco company's IOS software series in a fully modular, distributed network interconnection operating system. A security vulnerability exists in the CLI in Cisco IOS XR versions 6.x through 6.0.1. A local attacker could exploit the vulnerability to execute...

CVE-2016-1456

The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access, aka Bug ID CSCuz62721...

CVE-2016-1456

The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access, aka Bug ID CSCuz62721...

Code injection

Cisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of service timer consumption and Route Processor reload via crafted SSH traffic, aka Bug ID CSCux76819...

CVE-2016-1426

Cisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of service timer consumption and Route Processor reload via crafted SSH traffic, aka Bug ID CSCux76819...

CVE-2016-1426

Cisco IOS XR 5.x–5.2.5 on NCS 6000 devices is affected by a denial of service vulnerability (CVE-2016-1426) due to improper management of system timer resources. A remote, unauthenticated attacker can trigger timer/resource exhaustion by establishing multiple SSH connections (and related manageme...

CVE-2016-1426

Cisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of service timer consumption and Route Processor reload via crafted SSH traffic, aka Bug ID CSCux76819...

CVE-2016-1456

CVE-2016-1456 affects Cisco IOS XR 6.x through 6.0.1. A local attacker can exploit a flaw in the CLI/container input validation to run arbitrary OS commands with elevated/root privileges via a crafted input to a command in a specific container. The issue is a privilege-escalation vulnerability in...