Cisco IOS XR OSPF Link State Advertisement PCE DoS (cisco-sa-20160104-iosxr)

The remote Cisco IOS XR device is affected by a denial of service vulnerability due to the number of Open Shortest Path First OSPF Path Computation Elements PCEs configured for the OSPF Link State Advertisement LSA opaque area update. An unauthenticated, remote attacker can exploit this, via a...

CVE-2015-6432

Cisco IOS XR 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, and 5.3.2 does not properly restrict the number of Path Computation Elements PCEs for OSPF LSA opaque area updates, which allows remote attackers to cause a denial of service device reload via a crafted update, aka Bug ID...

CVE-2015-6432

CVE-2015-6432 affects Cisco IOS XR software (versions 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.2.0, 5.2.2, 5.2.4, 5.3.0, 5.3.2). The issue stems from improper restriction on the number of PCEs used for OSPF LSA opaque area updates, enabling an unauthenticated, remote attacker to cause a DoS (device reload) ...

CVE-2006-4024: Undefined Security Weakness

The FESTAHESLoad function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflo...