CVE-2013-3410

Cisco Intrusion Prevention System IPS Software on IPS NME devices before 7.09E4 allows remote attackers to cause a denial of service device reload via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977...

Code injection

Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software modules before 7.17sp1E4 allows remote attackers to cause a denial of service Analysis Engine process hang or device reload via fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCue51272...

Code injection

Cisco Intrusion Prevention System IPS Software on IPS NME devices before 7.09E4 allows remote attackers to cause a denial of service device reload via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977...

Code injection

The IDSM-2 drivers in Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service device hang via malformed IPv4 TCP packets, aka Bug ID CSCuh27460...

Design/Logic Flaw

The IP stack in Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software and hardware modules before 7.15E4, IPS 4500 sensors before 7.16E4, and IPS 4300 sensors before 7.15E4 allows remote attackers to cause a denial of service MainApp process hang via malformed IPv4 packets...

CVE-2013-1218

CVE-2013-1218 affects Cisco IPS Software on ASA 5500-X IPS-SSP modules prior to 7.1(7)sp1E4. The vulnerability arises from handling fragmented IPv4/IPv6 packets, which can cause the DoS condition (Analysis Engine process hang or device reload) on remote attackers over the network (vector: network...

CVE-2013-1218

Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software modules before 7.17sp1E4 allows remote attackers to cause a denial of service Analysis Engine process hang or device reload via fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCue51272...

CVE-2013-3411

The IDSM-2 drivers in Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service device hang via malformed IPv4 TCP packets, aka Bug ID CSCuh27460...

PT-2013-3002

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software and hardware modules versions prior to 7.15E4 Cisco IPS 4500 sensors versions prior to 7.16E4 Cisco IPS 4300 sensors versions prior to 7.15E4 Description The issue...

PT-2013-4367

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software on IPS NME devices versions prior to 7.09E4 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload. This is achieved by sending malformed IPv4...

CVE-2013-1243

The IP stack in Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software and hardware modules before 7.15E4, IPS 4500 sensors before 7.16E4, and IPS 4300 sensors before 7.15E4 allows remote attackers to cause a denial of service MainApp process hang via malformed IPv4 packets...

CVE-2013-3410

Cisco Intrusion Prevention System IPS Software on IPS NME devices before 7.09E4 allows remote attackers to cause a denial of service device reload via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977...

CVE-2013-3410

Cisco IPS Software on IPS NME devices before 7.0(9)E4 is affected by a DoS vulnerability (CVE-2013-3410) caused by malformed IPv4 packets triggering incorrect memory allocation, which can lead to a device reload. The advisory Cisco-SA-20130717-IPS details the issue and notes that Cisco has releas...

PT-2013-4368

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in a device hang, by...

Cisco Releases Multiple Security Advisories

Cisco has released two security advisories to address multiple vulnerabilities. These vulnerabilities may allow a remote attacker to execute arbitrary code on a vulnerable system or cause a denial-of-service condition. US-CERT encourages users and administrators to review the following Cisco...

CVE-2013-1243

CVE-2013-1243 affects Cisco IPS Software running on ASA 5500-X IPS-SSP (before 7.1(5)E4), IPS 4500 sensors (before 7.1(6)E4), and IPS 4300 sensors (before 7.1(5)E4). The vulnerability stems from the IP stack misprocessing malformed IPv4 packets, allowing remote unauthenticated attackers to trigge...

PT-2013-2981

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software modules versions prior to 7.17sp1E4 Description The issue allows remote attackers to cause a denial of service, resulting in either the Analysis Engine process hangi...

CVE-2013-3410: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Intrusion Prevention System IPS Software on IPS NME devices before 7.09E4 allows remote attackers to cause a denial of service device reload via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977...

CVE-2013-3411: Undefined Security Weakness

The IDSM-2 drivers in Cisco Intrusion Prevention System IPS Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service device hang via malformed IPv4 TCP packets, aka Bug ID CSCuh27460...

CVE-2013-1218: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco Intrusion Prevention System IPS Software in ASA 5500-X IPS-SSP software modules before 7.17sp1E4 allows remote attackers to cause a denial of service Analysis Engine process hang or device reload via fragmented 1 IPv4 or 2 IPv6 packets, aka Bug ID CSCue51272...