Code injection

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service chip and card hangs via malformed 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCuo68417...

CVE-2014-3322

Cisco IOS XR on ASR 9000 devices is affected by a NetFlow processing DoS caused by improper sampling of malformed IPv4/IPv6 packets (Bug CSCuo68417). The issue affects Typhoon-based line cards and can cause a lockup and reload of the Network Processor chip and line card when processing malicious ...

CVE-2014-3322

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service chip and card hangs via malformed 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCuo68417...

CVE-2014-3322: Improper Input Validation

Cisco IOS XR 4.3.2 and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service chip and card hangs via malformed 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCuo68417...

Cisco IOS XR Software NetFlow Processing Denial of Service Vulnerability

A vulnerability in NetFlow processing in Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a Network Processor NP chip and a line card processing traffic. The vulnerability is due to...

PT-2014-5216

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.2 and earlier Description The issue is related to improper NetFlow sampling of IP packets, which can be exploited by sending malformed IPv4 or IPv6 packets to cause a denial of service, resulting in chip and card hang...

CVE-2014-3321

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

CVE-2014-3321

Cisco IOS XR Software for ASR 9000 Series (versions 4.3.4 and earlier) is affected by a denial-of-service vulnerability in MPLS packet handling on a bridge-group virtual interface (BVI). The issue arises from insufficient parsing logic for crafted MPLS packets, which can cause the network process...

CVE-2014-3321

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

Design/Logic Flaw

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

CVE-2014-3321: Improper Input Validation

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

Cisco IOS XR Software MPLS Packet Denial of Service Vulnerability

A vulnerability in parsing crafted Multiprotocol Label Switching MPLS packets in Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor chip and a line card processing...

PT-2014-5215

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.4 and earlier Description The issue allows remote attackers to cause a denial of service via a series of crafted Multiprotocol Label Switching MPLS packets when bridge-group virtual interface BVI routing is enabled...

CVE-2014-3308

Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted packets, aka Bug ID CSCun83985...

Design/Logic Flaw

Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted packets, aka Bug ID CSCun83985...

CVE-2014-3308

Cisco IOS XR on Trident line cards in ASR 9000 devices is affected by a DoS due to a missing static punt policer. The vulnerability (Bug CSCun83985) allows remote unauthenticated attackers to cause CPU exhaustion by sending a flood of crafted packets targeting affected devices. The issue is speci...

CVE-2014-3308: Improper Input Validation

Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service CPU consumption by sending many crafted packets, aka Bug ID CSCun83985...

PT-2014-5203

Name of the Vulnerable Software and Affected Versions Cisco IOS XR on Trident line cards in ASR 9000 devices affected versions not specified Description The issue is related to a missing static punt policer for traffic destined to a device, which allows remote attackers to cause a denial of servi...

Cisco IOS XR Software IPv6 Malformed Packet DoS (cisco-sa-20140611-ipv6)

According to its self-reported version, the version of Cisco IOS XR running on the remote host is affected by a denial of service vulnerability due to the improper handling of IPv6 packets. A remote, unauthenticated attacker can cause the device to lock up by rapidly sending specially crafted IPv...

Code injection

Cisco IOS XR 4.1.2 through 5.1.1 on ASR 9000 devices, when a Trident-based line card is used, allows remote attackers to cause a denial of service NP chip and line card reload via malformed IPv6 packets, aka Bug ID CSCun71928...