CVE-2015-4195

Cisco IOS XR 5.1.1.K9SEC allows remote authenticated users to cause a denial of service vty error, and SSH and TELNET outage via a crafted disconnect action within an SSH session, aka Bug ID CSCul63127...

CVE-2015-4191

Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service ipv6io service reload via a malformed IPv6 packet, aka Bug ID CSCuq95565...

CVE-2015-4191

Cisco IOS XR 5.2.1 is affected by CVE-2015-4191, a denial-of-service vulnerability in IPv6 packet processing that can cause the ipv6_io service to reload when a malformed IPv6 packet is processed. Root cause is improper handling of IPv6 messages in the ipv6_io service. Exploitation is remote and ...

CVE-2015-4195

Cisco IOS XR 5.1.1.K9SEC is affected by CVE-2015-4195 where an authenticated remote attacker can trigger a denial of service by crafting an SSH disconnect action, making the vty inaccessible and causing SSH/Telnet outages. The root cause is an error in SSH disconnect handling. Cisco has published...

Cisco IOS XR Software Crafted IPv6 Packet DoS (cisco-sa-20150611-iosxr)

The remote Cisco IOS XR device is affected by a denial of service vulnerability due to improper processing of IPv6 packets carrying extension headers that are otherwise valid but are unlikely to occur during normal operation. A remote attacker, using a specially crafted packet, can cause a reload...

Cisco IOS XR SSH Disconnect Error Denial of Service Vulnerability

A vulnerability in Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to an error that could occur in the affected software when an SSH connection is disconnected from an affected device. An authenticated, remot...

Cisco Network Convergence System 6000 IOS XR Denial of Service Vulnerability

Cisco IOS XR on Network Convergence System 6000 devices is the United States of America Cisco Cisco company's set of routing equipment running in the provision of special network functions in a fully modular, distributed network operating system. A security vulnerability exists in the telnetd...

Cisco IOS XR

Crash on IPv6 packet processing...

CVE-2015-0776

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

CVE-2015-0769

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

Design/Logic Flaw

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

Code injection

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

CVE-2015-0769

Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service NPU ASIC scan and line-card reload via crafted IPv6 extension headers, aka Bug ID CSCtx03546...

CVE-2015-0769

Cisco IOS XR Software on CRS-3 (versions 4.0.1–4.2.0) contains a vulnerability in IPv6 processing that can be exploited remotely by sending crafted IPv6 extension headers. An unauthenticated attacker could trigger an ASIC scan of the Network Processor Unit (NPU) and cause a line-card reload, resu...

CVE-2015-0776

CVE-2015-0776 is a Cisco IOS XR telnetd denial of service affecting Network Convergence System 6000 devices running IOS XR 5.0.1. The root cause is improper processing of malformed TELNET packets by the telnetd process, which can allow an unauthenticated remote attacker to trigger a device reload...

CVE-2015-0776

telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service device reload via a malformed TELNET packet, aka Bug ID CSCuq31566...

Cisco Patches IPv6 Vulnerability in Carrier Routers

Cisco said on Thursday it has patched a denial of service vulnerability in its IOS XR software used in carrier-grade routers. The vulnerability, Cisco said, rests in the IPv6 processing code used by IOS XR in the Cisco CRS-3 Carrier Routing System. The bug is remotely exploitable and is due to...

Cisco IOS XR Software Crafted IPv6 Packet Denial of Service Vulnerability

A vulnerability in the IP version 6 IPv6 processing code of Cisco IOS XR Software for Cisco CRS-3 Carrier Routing System could allow an unauthenticated, remote attacker to trigger an ASIC scan of the Network Processor Unit NPU and a reload of the line card processing an IPv6 packet. The...

Cisco IOS XR telnetd Packet Processing Denial of Service Vulnerability

A vulnerability in the telnetd process of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a reload of the affected service. The vulnerability is due to improper processing of malformed Telnet packets directed to a device configured to process such packets. An attack...

CVE-2015-0176

CVE-2015-0176 describes a reflected cross-site scripting (XSS) vulnerability in the IBM WebSphere MQ XR WebSockets Listener. According to IBM and NVD sources, the issue arises from improper validation/sanitation of user-supplied input in the URI, which can be included in an error response and cau...