2057 matches found
CVE-2014-2144
Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service IPv4 and IPv6 transit outage via crafted redirect messages, aka Bug ID CSCum14266...
Design/Logic Flaw
Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service IPv4 and IPv6 transit outage via crafted redirect messages, aka Bug ID CSCum14266...
CVE-2014-2144
Cisco IOS XR is affected by CVE-2014-2144, where ICMPv6 redirect packets are not properly throttled, allowing remote attackers to cause a denial of service that impacts IPv4 and IPv6 transit. The vulnerability stems from improper handling of ICMPv6 redirect messages and is associated with Bug CSC...
PT-2014-4509
Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue is related to the improper throttling of ICMPv6 redirect packets, which can be exploited by remote attackers to cause a denial of service. This can result in an IPv4 and IPv6...
CVE-2014-2144: Improper Input Validation
Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service IPv4 and IPv6 transit outage via crafted redirect messages, aka Bug ID CSCum14266...
Cisco IOS XR Software Malformed Border Gateway Protocol Attribute Vulnerability (cisco-sa-20120926-bgp)
Cisco IOS XR Software contains a vulnerability in the Border Gateway Protocol BGP routing protocol feature. The vulnerability can be triggered when the router receives a malformed attribute from a peer on an existing BGP session. Successful exploitation of this vulnerability can cause all BGP...
Crafted IP Option Vulnerability (cisco-sa-20070124-crafted-ip-option)
Cisco routers and switches running Cisco IOS XR software may be vulnerable to a remotely exploitable crafted IP option Denial of Service DoS attack. Exploitation of the vulnerability may potentially allow for arbitrary code execution. The vulnerability may be exploited after processing an Interne...
Cisco IOS XR Software Memory Exhaustion Vulnerability (cisco-sa-20131002-iosxr)
Cisco IOS XR Software version 4.3.1 contains a vulnerability that could result in complete packet memory exhaustion. Successful exploitation could render critical services on the affected device unable to allocate packets resulting in a denial of service DoS condition. Cisco has released free...
Information Leakage Using IPv6 Routing Header in Cisco IOS XR (cisco-sa-20070808-IOS-IPv6-leak)
Cisco IOS XR contains a vulnerability when processing specially crafted IPv6 packets with a Type 0 Routing Header present. Exploitation of this vulnerability leads to information leakage on affected IOS and IOS XR devices, and can also result in a crash of the affected IOS device. Successful...
Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20120530-iosxr)
Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers ASR Route Switch Processor RSP-4G and RSP-8G, Route Switch Processor 440 RSP440, and Cisco...
Cisco IOS XR Version
The remote host is running IOS XR, an operating system for high-end carrier-grade Cisco routers. It is possible to read the IOS XR version number by connecting to the router using SSH or SNMP. C Tenable, Inc. include"compat.inc"; if description scriptid71430; scriptversion"1.20";...
Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20131023-iosxr)
Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the 'Affected Products' section of this advisory. The vulnerability is due to improper...
Cisco IOS XR Software Multiprotocol Label Switching Packet Vulnerability (cisco-sa-20100324-ldp)
A device running Cisco IOS XR Software is vulnerable to a remote denial of service DoS condition if it is configured for Multiprotocol Label Switching MPLS and has support for Label Distribution Protocol LDP. A crafted LDP UDP packet can cause an affected device running Cisco IOS XR Software to...
Cisco IOS XR Software SNMP Denial of Service Vulnerability
A vulnerability in the Simple Network Management Protocol SNMP module of Cisco IOS XR Software could allow an authenticated, remote attacker to cause a reload of the SNMP process on an affected device. The vulnerability is due to improper processing of SNMP requests for certain MIBs. An attacker...
Cross site request forgery (csrf)
The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service process reload via a request for an unspecified MIB, aka Bug ID CSCuh43144...
CVE-2013-6700
The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service process reload via a request for an unspecified MIB, aka Bug ID CSCuh43144...
CVE-2013-6700
CVE-2013-6700 affects Cisco IOS XR: the SNMP module could be abused by an authenticated remote attacker to cause a reload of the SNMP process by requesting certain MIBs (Bug CSCuh43144). The advisory confirms the vulnerability and that Cisco has released software updates. Attack requires SNMP acc...
PT-2013-6086
Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the Simple Network Management Protocol SNMP module, which allows remote attackers to cause a denial of service process reload via a request for an...
CVE-2013-6700: Improper Input Validation
The SNMP module in Cisco IOS XR allows remote attackers to cause a denial of service process reload via a request for an unspecified MIB, aka Bug ID CSCuh43144...
Design/Logic Flaw
The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service process crash via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176...