CVE-2016-1456

The CLI in Cisco IOS XR 6.x through 6.0.1 allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access, aka Bug ID CSCuz62721...

Cisco IOS XR Software Command Injection Vulnerability (cisco-sa-20160714-ios-xr)

A vulnerability in the command-line utility of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with elevated privileges. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenc...

Cisco Patches DoS Flaw in NCS 6000 Routers

Cisco Systems today released patches for two products, including one for a vulnerability rated a high criticality in Cisco IOS XR for the Cisco Network Convergence System series routers. The flaw rests in the management of system timer resources and could allow an attacker to remotely crash the...

Cisco IOS XR Software Command Injection Vulnerability

A vulnerability in the command-line utility of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with elevated privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in two products. Exploitation of one of these vulnerabilities could allow an unauthenticated remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security...

Cisco IOS XR for NCS 6000 Packet Timer Leak Denial of Service Vulnerability

A vulnerability in the management of system timer resources in Cisco IOS XR for Cisco Network Convergence System 6000 NCS 6000 Series Routers could allow an unauthenticated, remote attacker to cause a leak of system timer resources, leading to a nonoperational state and an eventual reload of the...

Adobe Flash Player Memory Corruption (APSB16-18: CVE-2016-4141)

A memory corruption vulnerability exists in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted JPEG-XR file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted JPEG-XR file...

CVE-2016-1409

The Neighbor Discovery ND protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service packet-processing outage via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in Ma...

CVE-2016-1407

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services LPTS flow-base entries, which allows remote attackers to cause a denial of service session drop by making many connection attempts to open TCP ports, aka Bug ID CSCux95576...

CVE-2016-1407

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services LPTS flow-base entries, which allows remote attackers to cause a denial of service session drop by making many connection attempts to open TCP ports, aka Bug ID CSCux95576...

Code injection

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services LPTS flow-base entries, which allows remote attackers to cause a denial of service session drop by making many connection attempts to open TCP ports, aka Bug ID CSCux95576...

CVE-2016-1407

Cisco IOS XR (ASR 9000 series)

CVE-2016-1407

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services LPTS flow-base entries, which allows remote attackers to cause a denial of service session drop by making many connection attempts to open TCP ports, aka Bug ID CSCux95576...

Cisco IOS XR < 6.1.1 on ASR 9000 LPTS DoS

The version of Cisco IOS XR running on the remote ASR 9000 device is prior to 6.1.1. It is, therefore, affected by a denial of service vulnerability in the Local Packet Transport Services LPTS network stack due to improper handling of flow base entries, in which too many known entries for a...

Cisco IOS XR LPTS Denial of Service Vulnerability (/cisco-sa-20160519-ios-xr)

A vulnerability in the Local Packet Transport Services LPTS network stack of Cisco IOS XR for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a limited denial of service DoS condition on an affected platform. Copyright C 2016 Greenbone...

Flash Player < 11.2.202.616 / 18.0.0.343 / 21.0.0.213 Multiple Vulnerabilities (APSB16-10)

Binary data 9276.prm...

Cisco IOS XR Software LPTS Denial of Service Vulnerability

A vulnerability in the Local Packet Transport Services LPTS network stack of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a limited denial of service DoS condition on an affected platform. The vulnerability is due to improper handling of flow base entries by LPTS...

Cisco IOS XR OpenSSH Module SSH Login Channel Identifier DoS

The version of Cisco IOS XR software running on the remote device is affected by a denial of service vulnerability in the OpenSSH module due to improper validation of the channel identifier during an SSH handshake negotiation. An authenticated, remote attacker can exploit this issue, via a crafte...

Cisco IOS XR Software Crafted IPv6 Packet Denial of Service Vulnerability (cisco-sa-20150611-iosxr)

A vulnerability in the IP version 6 IPv6 processing code of Cisco IOS XR Software for Cisco CRS-3 Carrier Routing System could allow an unauthenticated, remote attacker to trigger an ASIC scan of the Network Processor Unit NPU and a reload of the line card processing an IPv6 packet. Copyright C...

Cisco IOS XR Software Malformed RSVP Packet Denial of Service Vulnerability (Cisco-SA-20141218-CVE-2014-8014)

A vulnerability in RSVP processing of Cisco IOS XR could allow an unauthenticated, remote attacker to cause a reload of the RSVP process on the affected device. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...