CVE-2014-3396: Undefined Security Weakness

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

PT-2014-5286

Name of the Vulnerable Software and Affected Versions Cisco IOS XR on ASR 9000 devices affected versions not specified Description The issue is related to the improper use of compression for port-range and address-range encoding in access control lists ACLs on Typhoon line cards in Cisco ASR 9000...

CVE-2014-3379

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3377

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...

CVE-2014-3378

tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed TACACS+ packet, aka Bug ID CSCum00468...

Code injection

Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed RSVP packet, aka Bug ID CSCuq12031...

Code injection

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

Code injection

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...

CVE-2014-3378

tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed TACACS+ packet, aka Bug ID CSCum00468...

CVE-2014-3377

CVE-2014-3377 affects Cisco IOS XR 5.1 and earlier and stems from improper parsing of a malformed SNMPv2 packet in the snmpd daemon. An authenticated, remote attacker can cause a denial of service (reload of snmpd). Cisco’s advisory confirms a vulnerability and that software updates are available...

CVE-2014-3378

Cisco IOS XR 5.1 and earlier are affected by CVE-2014-3378 in tacacsd, where improper parsing of malformed TACACS+ packets can be exploited by an unauthenticated, remote attacker over the network to cause a denial of service via a TACACS+ daemon reload. The root cause is parsing of malformed TACA...

CVE-2014-3379

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3376

Cisco IOS XR (versions 5.1 and earlier) is affected by CVE-2014-3376 due to improper parsing of malformed RSVP packets, allowing an unauthenticated remote attacker to trigger a denial-of-service by reloading the RSVP process. Cisco has published a security advisory and software updates to fix the...

CVE-2014-3377

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...

CVE-2014-3379

CVE-2014-3379 affects Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices. The root cause is incorrect parsing of malformed MPLS packets, which can cause a denial of service resulting in NPU and line-card hang or reload. The vulnerability is exploitable by an unauthenticated, ...

CVE-2014-3376

Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed RSVP packet, aka Bug ID CSCuq12031...

CVE-2014-3376: Improper Input Validation

Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed RSVP packet, aka Bug ID CSCuq12031...

CVE-2014-3378: Improper Input Validation

tacacsd in Cisco IOS XR 5.1 and earlier allows remote attackers to cause a denial of service process reload via a malformed TACACS+ packet, aka Bug ID CSCum00468...

CVE-2014-3379: Improper Input Validation

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3377: Improper Input Validation

snmpd in Cisco IOS XR 5.1 and earlier allows remote authenticated users to cause a denial of service process reload via a malformed SNMPv2 packet, aka Bug ID CSCun67791...