Code injection

The PPTP-ALG component in CRS Carrier Grade Services Engine CGSE and ASR 9000 Integrated Service Module ISM in Cisco IOS XR allows remote attackers to cause a denial of service module reset via crafted packet streams, aka Bug ID CSCue91963...

CVE-2013-5498

The CVE-2013-5498 issue affects the PPTP-ALG component of Cisco CRS Carrier Grade Services Engine (CGSE) and Cisco ASR 9000 Series ISM running IOS XR. The root cause is in the PPTP-ALG’s handling of packet streams, allowing an unauthenticated, remote attacker to cause a denial of service via craf...

CVE-2013-5498: Improper Input Validation

The PPTP-ALG component in CRS Carrier Grade Services Engine CGSE and ASR 9000 Integrated Service Module ISM in Cisco IOS XR allows remote attackers to cause a denial of service module reset via crafted packet streams, aka Bug ID CSCue91963...

Cisco IOS XR Software CGSE and ISM Vulnerability

A vulnerability in Point-to-Point Tunneling Protocol-Application Level Gateway PPTP-ALG of the Cisco CRS Carrier Grade Services Engine CGSE and Cisco ASR 9000 Series Integrated Service Module ISM could allow an unauthenticated, remote attacker to cause the service interface module to reset. The...

Cisco Issues Four Security Advisories

Cisco issued four, moderate-severity security notices over the weekend, informing users of vulnerabilities in the company’s Adaptive Security Appliance and IOS XR software, its unified computing system, and wireless LAN controllers. Cisco warned of a vulnerability CVE-2013-3470, affecting the...

Code injection

The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet, aka Bug ID CSCue46731...

CVE-2013-3470

CVE-2013-3470 describes a denial-of-service vulnerability in Cisco IOS XR where the RIP Version 2 processor could crash due to insufficient input validation of crafted RIP packets. The issue is exploitable remotely by an unauthenticated attacker sending a specially crafted version-2 RIP packet to...

CVE-2013-3470

The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet, aka Bug ID CSCue46731...

CVE-2013-3470: Improper Input Validation

The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet, aka Bug ID CSCue46731...

Cisco IOS XR RIP Version 2 Crafted Packet Processing Denial of Service Vulnerability

A vulnerability in the Routing Information Protocol RIP process of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the RIP process to crash. The vulnerability is due to insufficient input validations of the packet. An attacker could exploit this vulnerability by...

PT-2013-4420

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue is related to the Routing Information Protocol RIP process, which allows remote attackers to cause a denial of service process crash via a crafted version-2 RIP packet...

Memory corruption

Cisco IOS XR allows local users to cause a denial of service Silicon Packet Processor memory corruption, improper mutex handling, and device reload by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347...

Cisco IOS XR Internet Control Message Protocol Denial of Service Vulnerability

Cisco IOS XR Software is affected by a denial of service DoS vulnerability that could allow an authenticated, local attacker to trigger a reload of the affected device by locally generating certain Internet Control Message Protocol ICMP messages. The vulnerability is due to a combination of Silic...

CVE-2013-3464

Cisco IOS XR allows local users to cause a denial of service Silicon Packet Processor memory corruption, improper mutex handling, and device reload by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347...

CVE-2013-3464

Cisco IOS XR contains a local-privilege DoS vulnerability (CVE-2013-3464) where an authenticated, local attacker can trigger a denial of service by sending a flood of large ICMP Echo Request packets to the Silicon Packet Processor. The issue arises from a combination of SPP buffer corruption and ...

CVE-2013-3464: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IOS XR allows local users to cause a denial of service Silicon Packet Processor memory corruption, improper mutex handling, and device reload by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347...

PT-2013-4415

Name of the Vulnerable Software and Affected Versions Cisco IOS XR Software affected versions not specified Description The issue allows local users to cause a denial of service by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence. This is due ...

Cisco IOS XR Software SNMP拒绝服务漏洞

BUGTRAQ ID: 60153 CVECAN ID: CVE-2013-1204 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS XR在SNMP进程中存在安全漏洞，可使未经身份验证的远程攻击者重新加载受影响进程并泄露部分内存信息。此漏洞源于没有释放已经分配的内存。攻击者通过发送大量的UDP报文到SNMP端口162上可触发此漏洞。 0 Cisco IOS XR 厂商补丁： Cisco ----- Cisco已经为此发布了一个安全公告（CVE-2013-1204）以及相应补丁: CVE-2013-1204：Cisco IOS XR...

CVE-2013-1204

Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service memory consumption or process reload by sending many port-162 UDP packets, aka Bug ID CSCug80345...

Memory corruption

Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service memory consumption or process reload by sending many port-162 UDP packets, aka Bug ID CSCug80345...