1623 matches found
CVE-2013-5503
The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service memory consumption via UDP packets to listening ports, aka Bug ID CSCue69413...
Cisco IOS XR Software Memory Exhaustion Vulnerability
Cisco IOS XR Software version 4.3.1 contains a vulnerability that could result in complete packet memory exhaustion. Successful exploitation could render critical services on the affected device unable to allocate packets resulting in a denial of service DoS condition. Cisco has released software...
Cisco Releases Security Advisory for Cisco IOS XR
Cisco has released a security advisory to address a vulnerability in Cisco IOS XR Software version 4.3.1. If successful, this exploitation could result in complete packet memory exhaustion, rendering critical services on the affected device unable to allocate packets, resulting in a denial of...
Code injection
The PPTP-ALG component in CRS Carrier Grade Services Engine CGSE and ASR 9000 Integrated Service Module ISM in Cisco IOS XR allows remote attackers to cause a denial of service module reset via crafted packet streams, aka Bug ID CSCue91963...
CVE-2013-5498
The CVE-2013-5498 issue affects the PPTP-ALG component of Cisco CRS Carrier Grade Services Engine (CGSE) and Cisco ASR 9000 Series ISM running IOS XR. The root cause is in the PPTP-ALG’s handling of packet streams, allowing an unauthenticated, remote attacker to cause a denial of service via craf...
Cisco IOS XR Software CGSE and ISM Vulnerability
A vulnerability in Point-to-Point Tunneling Protocol-Application Level Gateway PPTP-ALG of the Cisco CRS Carrier Grade Services Engine CGSE and Cisco ASR 9000 Series Integrated Service Module ISM could allow an unauthenticated, remote attacker to cause the service interface module to reset. The...
Cisco Issues Four Security Advisories
Cisco issued four, moderate-severity security notices over the weekend, informing users of vulnerabilities in the company’s Adaptive Security Appliance and IOS XR software, its unified computing system, and wireless LAN controllers. Cisco warned of a vulnerability CVE-2013-3470, affecting the...
Code injection
The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet, aka Bug ID CSCue46731...
CVE-2013-3470
The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet, aka Bug ID CSCue46731...
CVE-2013-3470
CVE-2013-3470 describes a denial-of-service vulnerability in Cisco IOS XR where the RIP Version 2 processor could crash due to insufficient input validation of crafted RIP packets. The issue is exploitable remotely by an unauthenticated attacker sending a specially crafted version-2 RIP packet to...
Cisco IOS XR RIP Version 2 Crafted Packet Processing Denial of Service Vulnerability
A vulnerability in the Routing Information Protocol RIP process of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the RIP process to crash. The vulnerability is due to insufficient input validations of the packet. An attacker could exploit this vulnerability by...
Memory corruption
Cisco IOS XR allows local users to cause a denial of service Silicon Packet Processor memory corruption, improper mutex handling, and device reload by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347...
Cisco IOS XR Internet Control Message Protocol Denial of Service Vulnerability
Cisco IOS XR Software is affected by a denial of service DoS vulnerability that could allow an authenticated, local attacker to trigger a reload of the affected device by locally generating certain Internet Control Message Protocol ICMP messages. The vulnerability is due to a combination of Silic...
CVE-2013-3464
Cisco IOS XR allows local users to cause a denial of service Silicon Packet Processor memory corruption, improper mutex handling, and device reload by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347...
CVE-2013-3464
Cisco IOS XR contains a local-privilege DoS vulnerability (CVE-2013-3464) where an authenticated, local attacker can trigger a denial of service by sending a flood of large ICMP Echo Request packets to the Silicon Packet Processor. The issue arises from a combination of SPP buffer corruption and ...
Cisco IOS XR Software SNMP拒绝服务漏洞
BUGTRAQ ID: 60153 CVECAN ID: CVE-2013-1204 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS XR在SNMP进程中存在安全漏洞，可使未经身份验证的远程攻击者重新加载受影响进程并泄露部分内存信息。此漏洞源于没有释放已经分配的内存。攻击者通过发送大量的UDP报文到SNMP端口162上可触发此漏洞。 0 Cisco IOS XR 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（CVE-2013-1204）以及相应补丁: CVE-2013-1204：Cisco IOS XR...
CVE-2013-1204
Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service memory consumption or process reload by sending many port-162 UDP packets, aka Bug ID CSCug80345...
Memory corruption
Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service memory consumption or process reload by sending many port-162 UDP packets, aka Bug ID CSCug80345...
CVE-2013-1204
CVE-2013-1204 affects Cisco IOS XR's SNMP process. A memory leak due to not freeing allocated memory allows unauthenticated remote attackers to cause a denial of service by flooding UDP port 162 (SNMP). Impact: memory exhaustion or process reload. Remediation: Cisco advisories indicate software u...