Code injection

The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service snmpd daemon reload via a malformed SNMP packet, aka Bug ID CSCur25858...

CVE-2015-0657

Cisco IOS XR allows remote attackers to cause a denial of service RSVP process reload via a malformed RSVP packet, aka Bug ID CSCur69192...

CVE-2015-0657

CVE-2015-0657 affects Cisco IOS XR. A remote attacker can cause a denial of service by sending a malformed RSVP packet, triggering an RSVP process reload (Bug ID CSCur69192). The connected documents confirm this is a Cisco IOS XR vulnerability; no additional exploit details or remediation are pro...

CVE-2015-0661

The CVE-2015-0661 entry covers Cisco IOS XR SNMPv2 processing. The SNMPv2 implementation allows remote authenticated users to cause a denial of service by sending malformed SNMP packets, triggering a reload of the snmpd daemon (Bug ID CSCur25858). The vulnerability is described with a CVSS v2 bas...

PT-2015-4784

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in the reload of the RSVP process, by sending a malformed RSVP packet. Recommendations At the moment, there is n...

PT-2015-4788

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue allows remote authenticated users to cause a denial of service, resulting in the snmpd daemon reload, by sending a malformed SNMP packet. Recommendations At the moment, there i...

Cisco IOS XR SNMPv2 Implementation Denial of Service Vulnerability

Cisco IOS XR is the United States Cisco Cisco company's IOS software series of a fully modular, distributed network operating system. A security vulnerability exists in the Cisco IOS XR's Simple Network Management Protocol version 2 SNMPv2 processing. A remote attacker could exploit this...

CVE-2015-0657: Improper Input Validation

Cisco IOS XR allows remote attackers to cause a denial of service RSVP process reload via a malformed RSVP packet, aka Bug ID CSCur69192...

CVE-2015-0661: Improper Input Validation

The SNMPv2 implementation in Cisco IOS XR allows remote authenticated users to cause a denial of service snmpd daemon reload via a malformed SNMP packet, aka Bug ID CSCur25858...

Cisco IOS XR GNU C Library (glibc) Buffer Overflow (GHOST)

The remote Cisco device is running a version of Cisco IOS XR software that is potentially affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validated user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2 functions. Th...

Cisco IPv6 Denial of Service Vulnerability

Cisco has identified a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service condition. The vulnerability is due to improper processing of malformed IPv6 packets carrying extension headers. Cisco Network Convergence System 6000 NCS 6000 and Cisco Carrier...

Code injection

Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System NCS 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X CRS-X devices allows remote attackers to cause a denial of service line-card reload via malformed IPv6 packets with extension headers, aka Bug ID CSCuq95241...

CVE-2015-0618

Cisco IOS XR DoS (CVE-2015-0618) affects IOS XR 5.0.1/5.2.1 on NCS 6000 and 5.1.3/5.1.4 on CRS-X. The issue arises from improper processing of malformed IPv6 packets with extension headers, allowing remote attackers to trigger a line-card reload and thus a denial of service. Evidence in multiple ...

CVE-2015-0618: Undefined Security Weakness

Cisco IOS XR 5.0.1 and 5.2.1 on Network Convergence System NCS 6000 devices and 5.1.3 and 5.1.4 on Carrier Routing System X CRS-X devices allows remote attackers to cause a denial of service line-card reload via malformed IPv6 packets with extension headers, aka Bug ID CSCuq95241...

Cisco IOS XR Software IPv6 Malformed Packet Denial of Service Vulnerability

A vulnerability in the parsing of malformed IP version 6 IPv6 packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 NCS 6000 and Cisco Carrier Routing System CRS-X could allow an unauthenticated, remote attacker to cause a reload of a line card that is processing traffic. The...

PT-2015-4762

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.0.1 through 5.2.1 on Network Convergence System NCS 6000 devices Cisco IOS XR versions 5.1.3 through 5.1.4 on Carrier Routing System X CRS-X devices Description The issue allows remote attackers to cause a denial of...

Cisco IOS XR Software Malformed RSVP Packet Denial of Service Vulnerability

A vulnerability in RSVP processing of Cisco IOS XR could allow an unauthenticated, remote attacker to cause a reload of the RSVP process on the affected device. The vulnerability is due to improper parsing of a malformed RSVP packet. An attacker could exploit this vulnerability by sending a...

CVE-2014-8014

Cisco IOS XR allows remote attackers to cause a denial of service RSVP process reload via a malformed RSVP packet, aka Bug ID CSCub63710...

Code injection

Cisco IOS XR allows remote attackers to cause a denial of service RSVP process reload via a malformed RSVP packet, aka Bug ID CSCub63710...

CVE-2014-8014

Cisco IOS XR Software Malformed RSVP Packet Denial of Service (CVE-2014-8014) involves a vulnerability in RSVP packet parsing that allows an unauthenticated, remote attacker to trigger a reload of the RSVP process. Affected component: RSVP processing in Cisco IOS XR; root cause described as impro...