Buffer overflow

Buffer overflow in the Active Template Library ATL framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139...

Code injection

The Java process in the Impact server in Cisco Prime Central for Hosted Collaboration Solution HCS allows remote attackers to cause a denial of service process crash via a flood of TCP packets, aka Bug ID CSCug57345...

CVE-2013-5559

Buffer overflow in the Active Template Library ATL framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139...

CVE-2013-5564

CVE-2013-5564 concerns the Java process in the Impact server of Cisco Prime Central for Hosted Collaboration Solution (HCS). Affected component is the Java process; the vulnerability allows an unauthenticated, remote attacker to cause a denial of service by sending a flood of TCP packets , leadin...

CVE-2013-5555

Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to cause a denial of service service restart via a crafted SIP message, aka Bug ID CSCub54349...

Code injection

Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to cause a denial of service service restart via a crafted SIP message, aka Bug ID CSCub54349...

Authentication flaw

The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795...

CVE-2013-5548

The CVE-2013-5548 issue affects Cisco IOS IKEv2 when using AES-GCM or AES-GMAC for Phase 2 SAs. The vulnerability is due to improper logic that enables or disables IPsec anti-replay protection, allowing remote attackers to bypass anti-replay protections on IPsec tunnel traffic. Affected component...

CVE-2013-5555

Cisco Unified Communications Manager (CUCM) is affected by a DoS vulnerability caused by improper parsing of a crafted SIP message (Bug ID CSCub54349). An unauthenticated, remote attacker can trigger a service restart. Multiple connected sources confirm the issue and Cisco has released an advisor...

CVE-2013-5555

Cisco Unified Communications Manager aka CUCM or Unified CM allows remote attackers to cause a denial of service service restart via a crafted SIP message, aka Bug ID CSCub54349...

CVE-2013-5548

The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795...

CVE-2013-5551

Cisco ASA Software is affected by CVE-2013-5551. When certain same-security-traffic and management-access options are enabled, remote authenticated users can trigger a stack overflow via the clientless SSL VPN portal for internal-resource browsing, causing the device to reload and suffer a DoS. E...

CVE-2013-5547

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending malformed EoGRE packets over 1 IPv4 or 2 IPv6, aka Bug ID CSCuf08269...

Design/Logic Flaw

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via large TCP packets that are processed by the 1 NAT or 2 ALG component, aka Bug ID CSCud72509...

Code injection

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending malformed EoGRE packets over 1 IPv4 or 2 IPv6, aka Bug ID CSCuf08269...

Design/Logic Flaw

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending many PPTP packets over NAT, aka Bug ID CSCuh19936...

CVE-2013-5546

The CVE-2013-5546 issue affects Cisco IOS XE on 1000 ASR devices, specifically in TCP reassembly. Affects the NAT and ALG processing paths where large TCP packets can trigger a device reload, causing a denial of service. Root cause: improper handling in TCP reassembly leading to crash under certa...

CVE-2013-5545

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending many PPTP packets over NAT, aka Bug ID CSCuh19936...

CVE-2013-5545

Cisco IOS XE PPTP ALG vulnerability (CVE-2013-5545) affects 1000-series ASR devices running 3.9 before 3.9.2S. The issue—described as a PPTP ALG handling flaw—allows unauthenticated, remote attackers to trigger a reload of ESP/RP and cause a DoS by sending many PPTP packets over NAT. Connected do...

CVE-2013-5543

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via malformed ICMP error packets associated with a 1 TCP or 2 UDP session that is under inspection by the Zone-Based Firewall ZBFW component, aka Bug ID...