Cisco IOS XR Software lighttpd TCP Session Vulnerability

A vulnerability in the lighttpd module of Cisco IOS XR could allow an unauthenticated, remote attacker to cause a reload of the affected lighttpd process. The vulnerability is due to a race condition while handling TCP sessions to the lighttpd module on the affected Cisco IOS XR device. An attack...

CVE-2014-8004

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

Design/Logic Flaw

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

CVE-2014-8004

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

CVE-2014-8004

Cisco IOS XR is affected by CVE-2014-8004. The issue arises when an attacker establishes many LISP TCP sessions, triggering a denial of service via a LISP process reload (Bug ID CSCuq90378). The available documents identify the vendor/product and the vulnerable component (LISP session handling) b...

Design/Logic Flaw

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

CVE-2014-3396

Cisco IOS XR on ASR 9000 Series (Typhoon line cards) is affected by CVE-2014-3396 due to improper compression encoding of port-range and address-range in ACL processing. The root cause is incorrect encoding in the compression module, which could allow an unauthenticated, remote attacker to bypass...

CVE-2014-3396

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

CVE-2014-3379

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3378

tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed TACACS+ packet, aka Bug ID CSCum00468...

CVE-2014-3377

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...

Code injection

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...

Code injection

Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed RSVP packet, aka Bug ID CSCuq12031...

Code injection

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3379

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3378

tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed TACACS+ packet, aka Bug ID CSCum00468...

CVE-2014-3376

Cisco IOS XR (versions 5.1 and earlier) is affected by CVE-2014-3376 due to improper parsing of malformed RSVP packets, allowing an unauthenticated remote attacker to trigger a denial-of-service by reloading the RSVP process. Cisco has published a security advisory and software updates to fix the...

CVE-2014-3379

CVE-2014-3379 affects Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices. The root cause is incorrect parsing of malformed MPLS packets, which can cause a denial of service resulting in NPU and line-card hang or reload. The vulnerability is exploitable by an unauthenticated, ...

CVE-2014-3377

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...

CVE-2014-3377

CVE-2014-3377 affects Cisco IOS XR 5.1 and earlier and stems from improper parsing of a malformed SNMPv2 packet in the snmpd daemon. An authenticated, remote attacker can cause a denial of service (reload of snmpd). Cisco’s advisory confirms a vulnerability and that software updates are available...