Cisco IOS XR Software Malformed TACACS+ Packet Denial of Service Vulnerability

A vulnerability in TACACS+ processing of Cisco IOS XR could allow an unauthenticated, remote attacker to cause a reload of the TACACS+ daemon tacacsd on the affected device. The vulnerability is due to improper parsing of a malformed TACACS+ packet. An attacker could exploit this vulnerability by...

Cisco IOS XR Software Malformed RSVP Packet Denial of Service Vulnerability

A vulnerability in RSVP processing of Cisco IOS XR could allow an unauthenticated, remote attacker to cause a reload of the RSVP process on the affected device. The vulnerability is due to improper parsing of a malformed RSVP packet. An attacker could exploit this vulnerability by sending a...

Cisco IOS XR Software Malformed MPLS Packet Denial of Service Vulnerability

A vulnerability in parsing of malformed Multiprotocol Label Switching MPLS packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 Series Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor unit NPU and a line...

PT-2014-5266

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier Description A vulnerability in RSVP processing could allow an unauthenticated, remote attacker to cause a reload of the RSVP process on the affected device. The issue is due to improper parsing of a...

PT-2014-5267

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier Description A vulnerability in the Simple Network Management Protocol SNMP version 2 processing of Cisco IOS XR allows an authenticated, remote attacker to cause a reload of the SNMP daemon snmpd process o...

PT-2014-5269

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier Description The issue allows remote attackers to cause a denial of service via a malformed MPLS packet. It is due to insufficient logic in parsing MPLS packets, which could allow an unauthenticated, adjace...

PT-2014-5268

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier Description A vulnerability in TACACS+ processing allows an unauthenticated, remote attacker to cause a reload of the TACACS+ daemon tacacsd on the affected device. The issue is due to improper parsing of ...

Cisco IOS XR NetFlow and Network Processor (NP) Chip DoS (Typhoon-based Line Cards)

The remote Cisco device is running a version of Cisco IOS XR software that is potentially affected by a denial of service vulnerability related the handling of a maliciously crafted packet with a multicast destination MAC address routed by a bridge-group virtual interface. Note that this issue on...

Cisco IOS XR Software Information Disclosure Vulnerability

A vulnerability in the command-line interface CLI of Cisco IOS XR Software could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to insufficient data protection of sensitive information. An attacker could exploit this vulnerability by issuing...

CVE-2014-3342

The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383...

Information disclosure

The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383...

CVE-2014-3342

The CVE-2014-3342 issue affects Cisco IOS XR CLI, allowing an authenticated, remote attacker to disclose sensitive information through specific CLI commands due to insufficient data protection. Cisco’s advisory states exploitation requires authentication and software updates have been released to...

CVE-2014-3342

The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383...

PT-2014-5234

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue allows remote authenticated users to obtain sensitive information via unspecified commands. Recommendations At the moment, there is no information about a newer version that...

CVE-2014-3342: Undefined Security Weakness

The CLI in Cisco IOS XR allows remote authenticated users to obtain sensitive information via unspecified commands, aka Bug IDs CSCuq42336, CSCuq76853, CSCuq76873, and CSCuq45383...

CVE-2014-3343

Cisco IOS XR 5.1 allows remote attackers to cause a denial of service DHCPv6 daemon crash via a malformed DHCPv6 packet, aka Bug ID CSCuo59052...

CVE-2014-3343

Cisco IOS XR Software DHCPv6 Denial of Service (CVE-2014-3343) affects IOS XR 5.1 and related builds. The issue stems from incorrect handling of malformed DHCPv6 packets, allowing remote attackers to cause the DHCPv6 server process to crash (DoS). Exploitation is network-based and does not requir...

CVE-2014-3343

Cisco IOS XR 5.1 allows remote attackers to cause a denial of service DHCPv6 daemon crash via a malformed DHCPv6 packet, aka Bug ID CSCuo59052...

CVE-2014-3343: Improper Input Validation

Cisco IOS XR 5.1 allows remote attackers to cause a denial of service DHCPv6 daemon crash via a malformed DHCPv6 packet, aka Bug ID CSCuo59052...

PT-2014-5235

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.1 Description A vulnerability in the DHCP version 6 DHCPv6 code could allow an unauthenticated, remote attacker to cause the DHCPv6 server process on an affected device to crash. The issue is due to incorrect handling of...