CVE-2014-3379

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

CVE-2014-3379: Improper Input Validation

Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service NPU and card hang or reload via a malformed MPLS packet, aka Bug ID CSCuq10466...

Cisco IOS XR Software Malformed MPLS Packet Denial of Service Vulnerability

A vulnerability in parsing of malformed Multiprotocol Label Switching MPLS packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 Series Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor unit NPU and a line...

PT-2014-5269

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 5.1 and earlier Description The issue allows remote attackers to cause a denial of service via a malformed MPLS packet. It is due to insufficient logic in parsing MPLS packets, which could allow an unauthenticated, adjace...

Cisco IOS XR MPLS and Network Processor (NP) Chip DoS (Typhoon-based Line Cards)

The remote Cisco device is running a version Cisco IOS XR software that is potentially affected by a denial of service vulnerability related the handling of maliciously crafted MPLS Multiprotocol Label Switching packets routed by a bridge-group virtual interface. Note that this issue only affects...

CVE-2014-3321

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

CVE-2014-3321

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

Design/Logic Flaw

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

CVE-2014-3321: Improper Input Validation

Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface BVI routing is enabled, allows remote attackers to cause a denial of service chip and card hangs via a series of crafted MPLS packets, aka Bug ID CSCuo91149...

Cisco IOS XR Software MPLS Packet Denial of Service Vulnerability

A vulnerability in parsing crafted Multiprotocol Label Switching MPLS packets in Cisco IOS XR Software for ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, adjacent attacker to cause a lockup and eventual reload of a network processor chip and a line card processing...

PT-2014-5215

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.4 and earlier Description The issue allows remote attackers to cause a denial of service via a series of crafted Multiprotocol Label Switching MPLS packets when bridge-group virtual interface BVI routing is enabled...

openSUSE Security Update : wireshark (openSUSE-SU-2013:0276-1)

wireshark was updated to 1.8.5 to fix bugs and security issues. Vulnerabilities fixed : - Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574...

openSUSE Security Update : wireshark (openSUSE-SU-2013:0494-1)

wireshark was updated to 1.8.6 bnc807942 + vulnerabilities fixed : - The TCP dissector could crash. wnpa-sec-2013-10 CVE-2013-2475 - The HART/IP dissectory could go into an infinite loop. wnpa-sec-2013-11 CVE-2013-2476 - The CSN.1 dissector could crash. wnpa-sec-2013-12 CVE-2013-2477 - The MS-MMS...

CVE-2013-6981

Cisco IOS XE 3.7S.1 and earlier allows remote attackers to cause a denial of service Packet Processor crash via fragmented MPLS IP packets, aka Bug ID CSCul00709...

Command injection

Cisco IOS XE 3.7S.1 and earlier allows remote attackers to cause a denial of service Packet Processor crash via fragmented MPLS IP packets, aka Bug ID CSCul00709...

CVE-2013-6981

Cisco IOS XE 3.7S.1 and earlier allows remote attackers to cause a denial of service Packet Processor crash via fragmented MPLS IP packets, aka Bug ID CSCul00709...

CVE-2013-6981

CVE-2013-6981 affects Cisco IOS XE (3.7S(.1) and earlier) where the MPLS IP fragmentation function can be exploited by unauthenticated, remote attackers sending specially crafted MPLS IP packets to crash the Cisco Packet Processor. Connected sources (Cisco Security Advisory CISCO-SA-20131224-CVE-...

CVE-2013-6981: Improper Input Validation

Cisco IOS XE 3.7S.1 and earlier allows remote attackers to cause a denial of service Packet Processor crash via fragmented MPLS IP packets, aka Bug ID CSCul00709...

Cisco IOS XE Crafted MPLS IP Fragmentation Denial of Service Vulnerability

A vulnerability in the Multiprotocol Label Switching MPLS IP fragmentation function of Cisco IOS XE could allow an unauthenticated, remote attacker to cause the Cisco Packet Processor to crash. The vulnerability is due to input validation processing of the crafted MPLS IP packets. An attacker cou...

PT-2013-6218

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.7S.1 and earlier Description A vulnerability in the Multiprotocol Label Switching MPLS IP fragmentation function could allow an unauthenticated, remote attacker to cause the Cisco Packet Processor to crash. The issue is...