CVE-2013-5565

The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service process crash via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176...

CVE-2013-5565: Improper Restriction of Operations within the Bounds of a Memory Buffer

The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service process crash via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176...

Cisco IOS XR Software OSPFv3 Denial of Service Vulnerability

A vulnerability in the Open Shortest Path First version 3 OSPFv3 implementation in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a crash of the OSPFv3 process on an affected device. The vulnerability is due to improper parsing of malformed type 1 link-state...

PT-2013-5645

Name of the Vulnerable Software and Affected Versions Cisco IOS XR version 5.1 Description The issue is related to the OSPFv3 functionality, which allows remote attackers to cause a denial of service process crash via a malformed LSA Type-1 packet. This is due to improper parsing of malformed typ...

CVE-2013-5549

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

Code injection

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

CVE-2013-5549

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

CVE-2013-5549

CVE-2013-5549 affects Cisco IOS XR releases 3.8.1 through 4.2.0, where fragmentation handling in RP-A/RP-B, PRP, and DRP-B route processors can lead to a denial of service (transmission outage) for both IPv4 and IPv6 traffic. The issue arises from improper processing of fragmented packets. A Cisc...

CVE-2013-5549: Undefined Security Weakness

Cisco IOS XR 3.8.1 through 4.2.0 does not properly process fragmented packets within the RP-A, RP-B, PRP, and DRP-B route-processor components, which allows remote attackers to cause a denial of service transmission outage via 1 IPv4 or 2 IPv6 traffic, aka Bug ID CSCuh30380...

Cisco Fixes DoS, Remote Code Execution Bugs in Six Products

Telecommunications company Cisco rolled out three patches for multiple products yesterday, addressing vulnerabilities that could’ve led to a denial of service DoS attack or allowed an attacker to execute code and obtain sensitive information. Per usual, Cisco’s Product Security Incident Respoinse...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability

Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the "Affected Products" section of this advisory. The vulnerability is due to improper...

PT-2013-5630

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.8.1 through 4.2.0 Cisco IOS XR Software Releases 3.3.0 to 4.2.0 Description The issue is related to the improper processing of fragmented packets within certain route-processor components, which can cause a denial of...

CVE-2013-5503

The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service memory consumption via UDP packets to listening ports, aka Bug ID CSCue69413...

Double free

The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service memory consumption via UDP packets to listening ports, aka Bug ID CSCue69413...

CVE-2013-5503

The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service memory consumption via UDP packets to listening ports, aka Bug ID CSCue69413...

CVE-2013-5503

CVE-2013-5503 concerns Cisco IOS XR 4.3.1 where the UDP processing path does not free packet memory after detecting full packet queues, enabling remote attackers to cause denial of service via UDP traffic to listening ports. The root cause is memory exhaustion on the device due to failure to rele...

Cisco IOS XR Software Memory Exhaustion Vulnerability

Cisco IOS XR Software version 4.3.1 contains a vulnerability that could result in complete packet memory exhaustion. Successful exploitation could render critical services on the affected device unable to allocate packets resulting in a denial of service DoS condition. Cisco has released software...

PT-2013-5587

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software version 4.3.1 Description The issue is related to the UDP process in Cisco IOS XR, which does not free packet memory upon detecting full packet queues. This allows remote attackers to cause a denial of service memory...

Cisco Releases Security Advisory for Cisco IOS XR

Cisco has released a security advisory to address a vulnerability in Cisco IOS XR Software version 4.3.1. If successful, this exploitation could result in complete packet memory exhaustion, rendering critical services on the affected device unable to allocate packets, resulting in a denial of...

CVE-2013-5503: Undefined Security Weakness

The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service memory consumption via UDP packets to listening ports, aka Bug ID CSCue69413...