Cisco Security Advisory: Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco ASR 9000 Series Routers Line Card IP Version 4 Denial of Service Vulnerability Advisory ID: cisco-sa-20110720-asr9k Revision 1.0 For Public Release 2011 July 20 1600 UTC GMT...

CVE-2011-1651

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

CVE-2011-0943

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service NetIO process restart or device reload via a crafted IPv4 packet, aka Bug ID CSCth44147...

CVE-2011-0949

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshdlock files from /tmp/, which allows remote attackers to cause a denial of service disk consumption by making many SSHv1 connections, aka Bug ID CSCtd64417...

Code injection

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service NetIO process restart or device reload via a crafted IPv4 packet, aka Bug ID CSCth44147...

Code injection

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

CVE-2011-1651

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

Design/Logic Flaw

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshdlock files from /tmp/, which allows remote attackers to cause a denial of service disk consumption by making many SSHv1 connections, aka Bug ID CSCtd64417...

CVE-2011-1651

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

CVE-2011-0943

CVE-2011-0943 affects Cisco IOS XR Software releases 3.8.3, 3.8.4, and 3.9.1. A crafted IPv4 packet can be sent by a remote attacker to trigger the NetIO process restart, potentially causing a reload of the affected line cards or CRS MSC and resulting in DoS. Root cause is tied to IPv4 packet han...

CVE-2011-1651

CVE-2011-1651 affects Cisco IOS XR on Cisco XR 12000 Series with a Shared Port Adapters (SPA) Interface Processor. A crafted IPv4 packet sent to an affected device can trigger a reload of the SPA interface processor, causing a denial-of-service condition (device reload). Affected software version...

CVE-2011-0943

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service NetIO process restart or device reload via a crafted IPv4 packet, aka Bug ID CSCth44147...

CVE-2011-0949

Cisco IOS XR Software SSHv1 denial of service vulnerability (CVE-2011-0949) affects 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1. The root cause is that sshd_lock files in /tmp are not properly removed after SSHv1 sessions, allowing remote attackers making many SSHv1 connections to exhaust /...

PT-2011-2772

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.8.3 through 3.9.1 Description The issue allows remote attackers to cause a denial of service, potentially leading to a NetIO process restart or device reload, by sending a crafted IPv4 packet. Recommendations For versio...

CVE-2011-0949: Undefined Security Weakness

Cisco IOS XR 3.6.x, 3.8.x before 3.8.3, and 3.9.x before 3.9.1 does not properly remove sshdlock files from /tmp/, which allows remote attackers to cause a denial of service disk consumption by making many SSHv1 connections, aka Bug ID CSCtd64417...

CVE-2011-0943: Undefined Security Weakness

Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service NetIO process restart or device reload via a crafted IPv4 packet, aka Bug ID CSCth44147...

PT-2011-2775

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.6.x through 3.9.0 Cisco IOS XR version 3.8.x through 3.8.2 Description The issue allows remote attackers to cause a denial of service, specifically disk consumption, by making many SSHv1 connections. This is due to the...

CVE-2011-1651: Undefined Security Weakness

Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1, when an SPA interface processor is installed, allows remote attackers to cause a denial of service device reload via a crafted IPv4 packet, aka Bug ID CSCto45095...

PT-2011-3265

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 3.9.x through 4.0.x before 4.0.3 Cisco IOS XR versions 4.1.x before 4.1.1 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a crafted IPv4 packet when an...

Cisco IOS XR SSHv1 '/tmp/ssh_lock'远程拒绝服务漏洞

Bugtraq ID: 47982 CVE ID：CVE-2011-0949 Cisco IOS是一款流行的Internet操作系统。Cisco IOS XR是Cisco IOS软件家族的一员，使用基于微内核分配操作系统架构。 Cisco IOS XR软件中SSH应用存在一个漏洞，当使用SSH版本1SSHv1协议时可导致拒绝服务攻击。漏洞会导致不能删除的sshdlock文件消耗所有/tmp文件系统中的可用空间。 当SSHv1连接连接到Cisco IOS...