Cisco IOS XR Software Fragmented Packets Processing Denial of Service Vulnerability (cisco-sa-20131023-iosxr)

Cisco IOS XR Software is prone to a denial of service DoS vulnerability. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

CVE-2014-3335

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service chip and card hangs via a crafted packet, aka Bug ID CSCup77750...

CVE-2014-3335

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service chip and card hangs via a crafted packet, aka Bug ID CSCup77750...

CVE-2014-3335

Cisco IOS XR vulnerability CVE-2014-3335 affects ASR 9000 Series with Typhoon-based line cards configured for NetFlow sampling. The issue stems from improper handling of packets with multicast destination MAC addresses during NetFlow sampling, potentially causing a lockup/reload of the Network Pr...

Cisco IOS XR Software Packet Parsing Denial of Service Vulnerability

A vulnerability in the packet parsing code of Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a Network Processor NP chip and a line card processing traffic. The vulnerability is due ...

Cisco IOS XR MPLS and Network Processor (NP) Chip DoS (Typhoon-based Line Cards)

The remote Cisco device is running a version Cisco IOS XR software that is potentially affected by a denial of service vulnerability related the handling of maliciously crafted MPLS Multiprotocol Label Switching packets routed by a bridge-group virtual interface. Note that this issue only affects...

Cisco IOS XR Software Static Punt Policer DoS (CSCun83985)

According to its self-reported version, the version of Cisco IOS XR running on the remote host is affected by a denial of service vulnerability due to a missing static punt policer. A remote, unauthenticated attacker can cause the device to lock up by rapidly sending specially crafted packets. No...

Cisco IOS XR DHCPv6 Multiple DoS Vulnerabilities

The remote Cisco device is running a version of Cisco IOS XR software that is affected by multiple denial of service vulnerabilities related to the incorrect handling of malformed DHCPv6 packets. TRUSTED...

Cisco IOS XR Typhoon-based Line Cards and Network Processor (NP) Chip DoS

The remote Cisco device is running a version Cisco IOS XR software that is potentially affected by a denial of service vulnerability related to Netflow and handling malformed IPv4/IPv6 packets. Note this issue only affects Cisco ASR 9000 series devices using Typhoon-based line cards and Netflow...

Cisco IOS XR OSPFv3 DoS (CSCuj82176)

The remote Cisco device is running a version Cisco IOS XR software that is affected by a denial of service vulnerability. A denial of service flaw exists with the Open Shortest Path First version 3 implementation when handling a type 1 link-state advertisement packet. A remote attacker, with a...

Code injection

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service chip and card hangs via malformed 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCuo68417...

CVE-2014-3322

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service chip and card hangs via malformed 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCuo68417...

CVE-2014-3322

Cisco IOS XR on ASR 9000 devices is affected by a NetFlow processing DoS caused by improper sampling of malformed IPv4/IPv6 packets (Bug CSCuo68417). The issue affects Typhoon-based line cards and can cause a lockup and reload of the Network Processor chip and line card when processing malicious ...

Cisco IOS XR Software NetFlow Processing Denial of Service Vulnerability

A vulnerability in NetFlow processing in Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a Network Processor NP chip and a line card processing traffic. The vulnerability is due to...

CVE-2014-3321

Cisco IOS XR Software for ASR 9000 Series (versions 4.3.4 and earlier) is affected by a denial-of-service vulnerability in MPLS packet handling on a bridge-group virtual interface (BVI). The issue arises from insufficient parsing logic for crafted MPLS packets, which can cause the network process...

CVE-2014-3321

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

CVE-2014-3321

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

Design/Logic Flaw

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

Cisco IOS XR Software MPLS Packet Denial of Service Vulnerability

A vulnerability in parsing crafted Multiprotocol Label Switching MPLS packets in Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor chip and a line card processing...

CVE-2014-3308

Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted packets, aka Bug ID CSCun83985...