UBUNTU-CVE-2013-1578

The dissectpwethheuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service loop via a malformed...

CVE-2013-1578

The dissectpwethheuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service loop via a malformed...

CVE-2013-1578

The dissectpwethheuristic function in epan/dissectors/packet-pw-eth.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 does not properly handle apparent Ethernet address values at the beginning of MPLS data, which allows remote attackers to cause a denial of service loop via a malformed...

PT-2013-3257

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.6.x through 1.6.12 Wireshark versions 1.8.x through 1.8.4 Description The issue exists in the dissect pw eth heuristic function due to incorrect handling of apparent Ethernet address values at the beginning of MPLS data...

Wireshark 1.6.x < 1.6.13 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 1.6.13. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.13 advisory. - Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote...

Wireshark 1.8.x < 1.8.5 Multiple Vulnerabilities

The installed version of Wireshark 1.8 is earlier than 1.8.5. It is, therefore, affected by the following vulnerabilities : - Errors exist related to the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors that could allow the...

CVE-2011-4007: Improper Input Validation

Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service device crash via network traffic that triggers 1 fragmentation or 2 reassembly, aka Bug ID CSCtr56576...

PT-2012-1780

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1 Cisco IOS XE versions 3.x Description The issue arises from improper handling of the set mpls experimental imposition command, allowing remote attackers to cause a denial of service, resulting in a device...

Juniper Junos MPLS DoS (PSN-2012-04-546)

According to its self-reported version number, the version of Junos running on the remote host has a denial of service vulnerability. When MPLS is enabled, receiving a high rate of Pseudo Wire l2vpn or l2circuit control words from an adjacent node can cause the routing engine RE to become...

Cisco Security Advisory: Cisco IOS Software RSVP Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Cisco IOS Software RSVP Denial of Service Vulnerability Advisory ID: cisco-sa-20120328-rsvp Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT +---------------------------------------------------------------------...

CVE-2011-3282

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

CVE-2011-3274

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device crash via a crafted IPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCto07919...

Code injection

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device crash via a crafted IPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCto07919...

Code injection

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device reload via an ICMPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCtj30155...

Code injection

The provider-edge MPLS NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload via a malformed SIP packet to UDP port 5060, aka Bug ID CSCti98219...

CVE-2011-3274

Unspecified vulnerability in Cisco IOS 12.2SRE before 12.233SRE4, 15.0, and 15.1, and IOS XE 2.1.x through 3.3.x, when an MPLS domain is configured, allows remote attackers to cause a denial of service device crash via a crafted IPv6 packet, related to an expired MPLS TTL, aka Bug ID CSCto07919...

CVE-2011-3279

The provider-edge MPLS NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload via a malformed SIP packet to UDP port 5060, aka Bug ID CSCti98219...

CVE-2011-3274

CVE-2011-3274 describes two IPv6-over-MPLS DoS vulnerabilities in Cisco IOS/IOS XE where crafted IPv6 packets (or ICMPv6 packets) can cause a reload of MPLS-configured devices, resulting in a denial of service. Affected products include Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, 15.1, and IOS X...

CVE-2011-3282

Summary: CVE-2011-3282 is a Cisco IOS/IOS XE vulnerability where MPLS + IPv6 traffic can cause a device to reload via crafted ICMPv6/IPv6 packets. Affected: Cisco IOS 12.2SRE before 12.2(33)SRE4, 15.0, 15.1; Cisco IOS XE 2.1.x through 3.3.x, with MPLS configured. Impact: remote denial of service ...

CVE-2011-3279

CVE-2011-3279 affects Cisco IOS NAT for provider-edge MPLS NAT on Cisco IOS 12.1–12.4 and 15.0–15.1, and IOS XE 3.1.xSG. A malformed SIP packet sent to UDP 5060 can cause a device reload (DoS) on vulnerable MPLS NAT devices. The Cisco PSIRT advisory CSCti98219 documents this vulnerability and pro...