Cisco IOS XR Software Multiprotocol Label Switching Packet Vulnerability (cisco-sa-20100324-ldp)

A device running Cisco IOS XR Software is vulnerable to a remote denial of service DoS condition if it is configured for Multiprotocol Label Switching MPLS and has support for Label Distribution Protocol LDP. A crafted LDP UDP packet can cause an affected device running Cisco IOS XR Software to...

Cisco IOS XR Version

The remote host is running IOS XR, an operating system for high-end carrier-grade Cisco routers. It is possible to read the IOS XR version number by connecting to the router using SSH or SNMP. C Tenable, Inc. include"compat.inc"; if description scriptid71430; scriptversion"1.20";...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20120530-iosxr)

Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers ASR Route Switch Processor RSP-4G and RSP-8G, Route Switch Processor 440 RSP440, and Cisco...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20131023-iosxr)

Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the 'Affected Products' section of this advisory. The vulnerability is due to improper...

Crafted IP Option Vulnerability (cisco-sa-20070124-crafted-ip-option)

Cisco routers and switches running Cisco IOS XR software may be vulnerable to a remotely exploitable crafted IP option Denial of Service DoS attack. Exploitation of the vulnerability may potentially allow for arbitrary code execution. The vulnerability may be exploited after processing an Interne...

Cisco IOS XR Software Malformed Border Gateway Protocol Attribute Vulnerability (cisco-sa-20120926-bgp)

Cisco IOS XR Software contains a vulnerability in the Border Gateway Protocol BGP routing protocol feature. The vulnerability can be triggered when the router receives a malformed attribute from a peer on an existing BGP session. Successful exploitation of this vulnerability can cause all BGP...

Cisco IOS XR Software Memory Exhaustion Vulnerability (cisco-sa-20131002-iosxr)

Cisco IOS XR Software version 4.3.1 contains a vulnerability that could result in complete packet memory exhaustion. Successful exploitation could render critical services on the affected device unable to allocate packets resulting in a denial of service DoS condition. Cisco has released free...

Information Leakage Using IPv6 Routing Header in Cisco IOS XR (cisco-sa-20070808-IOS-IPv6-leak)

Cisco IOS XR contains a vulnerability when processing specially crafted IPv6 packets with a Type 0 Routing Header present. Exploitation of this vulnerability leads to information leakage on affected IOS and IOS XR devices, and can also result in a crash of the affected IOS device. Successful...

Cisco IOS XR Software SNMP Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP module of Cisco IOS XR Software could allow an authenticated, remote attacker to cause a reload of the SNMP process on an affected device. The vulnerability is due to improper processing of SNMP requests for certain MIBs. An attacker...

Cross site request forgery (csrf)

The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service process reload via a request for an unspecified MIB, aka Bug ID CSCuh43144...

CVE-2013-6700

The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service process reload via a request for an unspecified MIB, aka Bug ID CSCuh43144...

CVE-2013-6700

CVE-2013-6700 affects Cisco IOS XR: the SNMP module could be abused by an authenticated remote attacker to cause a reload of the SNMP process by requesting certain MIBs (Bug CSCuh43144). The advisory confirms the vulnerability and that Cisco has released software updates. Attack requires SNMP acc...

Design/Logic Flaw

The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service process crash via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176...

CVE-2013-5565

The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service process crash via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176...

Cisco IOS XR Software OSPFv3 Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First version 3 OSPFv3 implementation in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a crash of the OSPFv3 process on an affected device. The vulnerability is due to improper parsing of malformed type 1 link-state...

CVE-2013-5549

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

Code injection

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

CVE-2013-5549

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

CVE-2013-5549

CVE-2013-5549 affects Cisco IOS XR releases 3.8.1 through 4.2.0, where fragmentation handling in RP-A/RP-B, PRP, and DRP-B route processors can lead to a denial of service (transmission outage) for both IPv4 and IPv6 traffic. The issue arises from improper processing of fragmented packets. A Cisc...

Cisco Fixes DoS, Remote Code Execution Bugs in Six Products

Telecommunications company Cisco rolled out three patches for multiple products yesterday, addressing vulnerabilities that could’ve led to a denial of service DoS attack or allowed an attacker to execute code and obtain sensitive information. Per usual, Cisco’s Product Security Incident Respoinse...