PT-2016-7699

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Series Software version 20.2.3 Description A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. Recommendations For Cisco...

CVE-2016-9203: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases:...

Cisco ASR 5000 Series IKEv2 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. The vulnerability is due to a race condition in the IKEv2 negotiation logic. An attacker could exploit...

Cisco ASR 5000 Series ipsecmgr Service DoS (cisco-sa-20161116-asr)

The remote Cisco ASR 5000 Series device is affected by a denial of service vulnerability in the ipsecmgr service of StarOS due to improper processing of Internet Key Exchange IKE messages. An unauthenticated, remote attacker can exploit this vulnerability, via specially crafted IKE messages, to...