PT-2014-8383

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue is related to the improper parsing of a malformed RSVP packet, which could allow an unauthenticated, remote attacker to cause a reload of the RSVP process on the affected devic...

CVE-2014-8014: Undefined Security Weakness

Cisco IOS XR allows remote attackers to cause a denial of service RSVP process reload via a malformed RSVP packet, aka Bug ID CSCub63710...

Cisco IOS XR Malformed RSVP Packet DoS

The remote Cisco device is running a version of IOS XR software that is affected by a denial of service vulnerability related to the improper parsing of malformed RSVP packets. TRUSTED...

CVE-2014-8005

Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service process reload by establishing many TCP sessions, aka Bug ID CSCuq45239...

Race condition

Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service process reload by establishing many TCP sessions, aka Bug ID CSCuq45239...

CVE-2014-8005

Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service process reload by establishing many TCP sessions, aka Bug ID CSCuq45239...

CVE-2014-8005

The CVE-2014-8005 entry concerns a race condition in the lighttpd module of Cisco IOS XR (5.1 and earlier) running on Network Convergence System 6000 devices. The vulnerability allows an unauthenticated, remote attacker to cause a denial of service by establishing many TCP sessions to the lighttp...

CVE-2014-8005: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service process reload by establishing many TCP sessions, aka Bug ID CSCuq45239...

Cisco IOS XR DHCPv6 DoS

The remote Cisco device is running a version of Cisco IOS XR software that is affected by a denial of service vulnerability related to the incorrect handling of malformed DHCPv6 packets. TRUSTED...

Cisco IOS XR Software lighttpd TCP Session Vulnerability

A vulnerability in the lighttpd module of Cisco IOS XR could allow an unauthenticated, remote attacker to cause a reload of the affected lighttpd process. The vulnerability is due to a race condition while handling TCP sessions to the lighttpd module on the affected Cisco IOS XR device. An attack...

CVE-2014-8004

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

Design/Logic Flaw

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

CVE-2014-8004

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

CVE-2014-8004

Cisco IOS XR is affected by CVE-2014-8004. The issue arises when an attacker establishes many LISP TCP sessions, triggering a denial of service via a LISP process reload (Bug ID CSCuq90378). The available documents identify the vendor/product and the vulnerable component (LISP session handling) b...

PT-2014-8377

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier Description A race condition in the lighttpd module allows remote attackers to cause a denial of service by establishing many TCP sessions. The vulnerability is due to a race condition while handling TCP...

PT-2014-8376

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue allows remote attackers to cause a denial of service by establishing many LISP TCP sessions, which can lead to a LISP process reload. Recommendations At the moment, there is no...

CVE-2014-8004: Undefined Security Weakness

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

Design/Logic Flaw

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

CVE-2014-3396

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

CVE-2014-3396

Cisco IOS XR on ASR 9000 Series (Typhoon line cards) is affected by CVE-2014-3396 due to improper compression encoding of port-range and address-range in ACL processing. The root cause is incorrect encoding in the compression module, which could allow an unauthenticated, remote attacker to bypass...