CVE-2014-3825

The Juniper SRX Series devices with Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10, when an Application Layer Gateway ALG is enabled, allows remote attackers to cause a denial of service flowd crash...

CVE-2014-3825

CVE-2014-3825 affects Juniper SRX Series devices running Junos 11.4 before 11.4R12-S4, 12.1X44 before 12.1X44-D40, 12.1X45 before 12.1X45-D30, 12.1X46 before 12.1X46-D25, and 12.1X47 before 12.1X47-D10. When an Application Layer Gateway (ALG) is enabled, remote attackers can cause a denial of ser...

Juniper Junos SRX Series ALG 'flowd' Remote DoS (JSA10650)

According to its self-reported version number, the remote Juniper Junos SRX series device is affected by a denial of service vulnerability related to ALG Application Layer Gateway. A remote attacker can exploit this issue by sending a specially crafted SIP packet to an SRX series device, resultin...

Cisco IOS Software Network Address Translation (NAT) ALG Module DoS (cisco-sa-20140924-nat)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by a denial of service vulnerability in the Network Address Translation NAT application-layer gateway ALG module. This issue exists due to improper handling of multipart Session Description...

CVE-2014-3361

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service device reload via multipart SDP IPv4 traffic, aka Bug ID CSCun54071...

Code injection

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service device reload via multipart SDP IPv4 traffic, aka Bug ID CSCun54071...

CVE-2014-3361

CVE-2014-3361 affects Cisco IOS Software (15.0–15.4) NAT ALG module. The bug arises from improper handling of SIP over NAT, specifically multipart SDP in SIP messages, allowing a remote attacker to cause a denial of service (device reload). This is a network-accessible issue in the ALG/NAT proces...

Juniper Networks Junos OS SIP ALG Denial of Service Vulnerability

DoS on SRX devices when SIP ALG is enabled SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Juniper Junos SRX Series SIP ALG Remote DoS (JSA10633)

According to its self-reported version number, the remote Junos device is affected by a denial of service vulnerability. A remote attacker, by sending a specially crafted SIP packet to an SRX series device, can crash the 'flowd' process. Note that this issue only affects SRX series devices when S...

Cisco IOS Software Multiple Network Address Translation (NAT) Denial of Service Vulnerabilities (cisco-sa-20140326-nat)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by multiple denial of service vulnerabilities in the Network Address Translation NAT implementation : - An issue exists in the TCP Input module due to the improper handling of certain sequences...

Cisco IOS Software NAT DNS漏洞

CVECAN ID: CVE-2014-2111 Cisco IOS是多数思科系统路由器和网络交换机上使用的互联网络操作系统。 Cisco IOS 15.1-15.4版本内的应用层网关ALG模块存在安全漏洞，未经身份验证的远程攻击者利用此漏洞可造成受影响设备重载，导致拒绝服务（内存耗尽）。 0 Cisco IOS 15.1-15.4 Cisco已经为此发布了一个安全公告（cisco-sa-20140326-nat）以及相应补丁:...

CVE-2014-2111

The Application Layer Gateway ALG module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCue00996...

CVE-2014-2111

The CVE-2014-2111 issue affects Cisco IOS (ALG module) NAT handling. When NAT is used, crafted DNS packets can cause remote, unauthenticated attackers to trigger a device reload, resulting in DoS. Affected Cisco IOS versions span 12.2–12.4 and 15.0–15.4. The vulnerability arises from how certain ...

CVE-2013-5546

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via large TCP packets that are processed by the 1 NAT or 2 ALG component, aka Bug ID CSCud72509...

Design/Logic Flaw

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via large TCP packets that are processed by the 1 NAT or 2 ALG component, aka Bug ID CSCud72509...

Design/Logic Flaw

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending many PPTP packets over NAT, aka Bug ID CSCuh19936...

CVE-2013-5546

The CVE-2013-5546 issue affects Cisco IOS XE on 1000 ASR devices, specifically in TCP reassembly. Affects the NAT and ALG processing paths where large TCP packets can trigger a device reload, causing a denial of service. Root cause: improper handling in TCP reassembly leading to crash under certa...

CVE-2013-5545

Cisco IOS XE PPTP ALG vulnerability (CVE-2013-5545) affects 1000-series ASR devices running 3.9 before 3.9.2S. The issue—described as a PPTP ALG handling flaw—allows unauthenticated, remote attackers to trigger a reload of ESP/RP and cause a DoS by sending many PPTP packets over NAT. Connected do...

CVE-2013-5545

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending many PPTP packets over NAT, aka Bug ID CSCuh19936...

CVE-2013-5546

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via large TCP packets that are processed by the 1 NAT or 2 ALG component, aka Bug ID CSCud72509...