CVE-2011-3295

The NETIO and IPV4IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service CPU consumption via crafted network traffic, aka Bug ID CSCti59888...

Code injection

The NETIO and IPV4IO processes in Cisco IOS XR 3.8 through 4.1, as used in Cisco Carrier Routing System and other products, allow remote attackers to cause a denial of service CPU consumption via crafted network traffic, aka Bug ID CSCti59888...

CVE-2011-3295

CVE-2011-3295 impacts Cisco IOS XR 3.8–4.1 (as deployed in Cisco Carrier Routing System and related products). The NETIO and IPV4_IO processes can be abused by crafted network traffic to cause a denial of service via CPU exhaustion. The available sources confirm the affected platform and the cond...

CVE-2011-2549

Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers ASR 9000 series devices allows remote attackers to cause a denial of service line-card reload via an IPv4 packet, aka Bug ID CSCtr26695...

Code injection

Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers ASR 9000 series devices allows remote attackers to cause a denial of service line-card reload via an IPv4 packet, aka Bug ID CSCtr26695...

CVE-2011-2549

Cisco ASR 9000 Series Routers running IOS XR 4.1.0 are vulnerable to a network processor lockup on IPv4 packet processing, which can cause the affected line card to reload and lead to a DoS. The issue is documented as CSCtr26695 (CVE-2011-2549). The vulnerability affects IPv4 traffic (IPv6 alone ...

CVE-2011-2549

Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers ASR 9000 series devices allows remote attackers to cause a denial of service line-card reload via an IPv4 packet, aka Bug ID CSCtr26695...

Cisco Security Advisory: Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability Advisory ID: cisco-sa-20110720-asr9k Revision 1.0 For Public Release 2011 July 20 1600 UTC GMT...

CVE-2011-1651

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

CVE-2011-0949

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshdlock files from /tmp/, which allows remote attackers to cause a denial of service disk consumption by making many SSHv1 connections, aka Bug ID CSCtd64417...

CVE-2011-0943

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service NetIO process restart or device reload via a crafted IPv4 packet, aka Bug ID CSCth44147...

Code injection

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service NetIO process restart or device reload via a crafted IPv4 packet, aka Bug ID CSCth44147...

Code injection

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

CVE-2011-1651

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

Design/Logic Flaw

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshdlock files from /tmp/, which allows remote attackers to cause a denial of service disk consumption by making many SSHv1 connections, aka Bug ID CSCtd64417...

CVE-2011-0943

CVE-2011-0943 affects Cisco IOS XR Software releases 3.8.3, 3.8.4, and 3.9.1. A crafted IPv4 packet can be sent by a remote attacker to trigger the NetIO process restart, potentially causing a reload of the affected line cards or CRS MSC and resulting in DoS. Root cause is tied to IPv4 packet han...

CVE-2011-1651

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

CVE-2011-1651

CVE-2011-1651 affects Cisco IOS XR on Cisco XR 12000 Series with a Shared Port Adapters (SPA) Interface Processor. A crafted IPv4 packet sent to an affected device can trigger a reload of the SPA interface processor, causing a denial-of-service condition (device reload). Affected software version...

CVE-2011-0943

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service NetIO process restart or device reload via a crafted IPv4 packet, aka Bug ID CSCth44147...

CVE-2011-0949

Cisco IOS XR Software SSHv1 denial of service vulnerability (CVE-2011-0949) affects 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1. The root cause is that sshd_lock files in /tmp are not properly removed after SSHv1 sessions, allowing remote attackers making many SSHv1 connections to exhaust /...