Information disclosure

The IPsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.11.7, when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of service device reload via a 1 ICMP or 2 ICMPv6 packet that is improperly handled during decryption, aka Bug ID CSCue18975...

CVE-2013-5507

The IPsec implementation in Cisco Adaptive Security Appliance ASA Software 9.1 before 9.11.7, when an IPsec VPN tunnel is enabled, allows remote attackers to cause a denial of service device reload via a 1 ICMP or 2 ICMPv6 packet that is improperly handled during decryption, aka Bug ID CSCue18975...

CVE-2013-5508

The SQLNet inspection engine in Cisco Adaptive Security Appliance ASA Software 7.x before 7.25.12, 8.x before 8.25.44, 8.3.x before 8.32.39, 8.4.x before 8.46, 8.5.x before 8.51.18, 8.6.x before 8.61.12, 8.7.x before 8.71.6, 9.0.x before 9.02.10, and 9.1.x before 9.12 and Firewall Services Module...

Security feature bypass

The remember feature in the DHCP server in Cisco IOS allows remote attackers to cause a denial of service device reload by acquiring a lease and then sending a DHCPRELEASE message, aka Bug ID CSCuh46822...

Cisco IOS Software DHCP Server remember Functionality Vulnerability

An issue in the DHCP server code of Cisco IOS Software could allow an unauthenticated, adjacent attacker to cause the device to reload. The issue is due to the remember functionality of the DHCP server. An attacker could exploit this issue by obtaining a lease and then releasing it. An exploit...

PT-2013-5598 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.x through 8.25.43 Cisco Adaptive Security Appliance ASA Software versions 8.3.x through 8.32.38 Cisco Adaptive Security Appliance ASA Software versions 8.4.x through 8.45.6 Cisco...

PT-2013-5623 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.47.2 Cisco Adaptive Security Appliance ASA Software versions 8.7 before 8.71.8 Cisco Adaptive Security Appliance ASA Software versions 9.0 before 9.03.6 Cisco Adaptive...

PT-2013-5596 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2.x through 8.25.45 Cisco Adaptive Security Appliance ASA Software versions 8.3.x through 8.32.38 Cisco Adaptive Security Appliance ASA Software versions 8.4.x through 8.45.4 Cisco...

Cisco IOS XE Software Internet Key Exchange Memory Leak Vulnerability (cisco-sa-20130925-ike)

A vulnerability in the Internet Key Exchange IKE protocol of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a device reload. The vulnerability is due to incorrect handling of malformed IKE packets by the affected software. An attack...

Cisco IOS Software Internet Key Exchange Memory Leak Vulnerability (cisco-sa-20130925-ike)

A vulnerability exists in the Internet Key Exchange IKE protocol of Cisco IOS Software that could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a device reload. The vulnerability is due to incorrect handling of malformed IKE packets by the affected software. ...

Design/Logic Flaw

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...

Code injection

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCuf28733...

CVE-2013-5481

Cisco IOS Software NAT implementation contains a vulnerability in PPTP handling that, when NAT is used, can be exploited by remote attackers sending crafted TCP port-1723 packets to cause a DoS and device reload. Affected releases include Cisco IOS 12.2 and 15.0–15.3. The issue is identified as B...

CVE-2013-5479

The DNS-over-TCP implementation in Cisco IOS 12.2 and 15.0 through 15.3, when NAT is used, allows remote attackers to cause a denial of service device reload via a crafted IPv4 DNS TCP stream, aka Bug ID CSCtn53730...

Cisco IOS Software Internet Key Exchange Memory Leak Vulnerability

A vulnerability in the Internet Key Exchange IKE protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a device reload. The vulnerability is due to incorrect handling of malformed IKE packets by the...

Cisco Releases Semiannual IOS Software Security Advisory Bundled Publication

Cisco has released its semiannual Cisco IOS Software Security Advisory Bundled Publication. This publication includes eight Security Advisories that address vulnerabilities in Cisco IOS Software. Exploits of these vulnerabilities could result in a denial of service DoS condition, interface queue...

Memory corruption

Cisco IOS XR allows local users to cause a denial of service Silicon Packet Processor memory corruption, improper mutex handling, and device reload by starting an outbound flood of large ICMP Echo Request packets and stopping this with a CTRL-C sequence, aka Bug ID CSCui60347...

Cisco IOS ISM Module for ISR G2 Authentication Header DoS

The Cisco ISM module for ISR G2 has a denial of service vulnerability. According to its self-reported IOS version, the remote device may be affected by this vulnerability. A remote, authenticated attacker could exploit this issue by sending malformed authentication header packets over an...

CVE-2013-1236

Cisco TelePresence Supervisor MSE 8050 before 2.31.31 allows remote attackers to cause a denial of service CPU consumption or device reload by establishing TCP connections at a high rate, aka Bug IDs CSCuf76076 and CSCuf79763...

Race condition

Race condition on Cisco Adaptive Security Appliances ASA devices allows remote attackers to cause a denial of service CPU consumption or device reload by establishing multiple connections, leading to improper handling of hash lookups for secondary flows, aka Bug IDs CSCue31622 and CSCuc71272...