PT-2015-4254

Name of the Vulnerable Software and Affected Versions TYPO3 versions 4.5.x through 4.5.38 TYPO3 versions 4.6.x through 6.2.x before 6.2.9 TYPO3 versions 7.x before 7.0.2 Description The issue allows remote attackers to have an unspecified impact, possibly resource consumption, via a "Cache...

Cisco IOS XR Software Malformed RSVP Packet Denial of Service Vulnerability

A vulnerability in RSVP processing of Cisco IOS XR could allow an unauthenticated, remote attacker to cause a reload of the RSVP process on the affected device. The vulnerability is due to improper parsing of a malformed RSVP packet. An attacker could exploit this vulnerability by sending a...

PT-2014-8383

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue is related to the improper parsing of a malformed RSVP packet, which could allow an unauthenticated, remote attacker to cause a reload of the RSVP process on the affected devic...

Design/Logic Flaw

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

PT-2014-8376

Name of the Vulnerable Software and Affected Versions Cisco IOS XR affected versions not specified Description The issue allows remote attackers to cause a denial of service by establishing many LISP TCP sessions, which can lead to a LISP process reload. Recommendations At the moment, there is no...

CVE-2014-8004: Undefined Security Weakness

Cisco IOS XR allows remote attackers to cause a denial of service LISP process reload by establishing many LISP TCP sessions, aka Bug ID CSCuq90378...

Command injection

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

PT-2014-5298

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.233SRE9a Cisco IOS XE versions prior to 3.13S Description The issue affects the Ethernet Connectivity Fault Management handling feature, allowing remote attackers to cause a denial of service by sending malformed...

CVE-2014-3409: Undefined Security Weakness

The Ethernet Connectivity Fault Management CFM handling feature in Cisco IOS 12.233SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service device reload via malformed CFM packets, aka Bug ID CSCuq93406...

CVE-2014-3370

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447...

CVE-2014-3406

Race condition in the IP logging feature in Cisco Intrusion Prevention System IPS Software 7.17E4 and earlier allows remote attackers to cause a denial of service device reload via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085...

PT-2014-5260

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS and Expressway Software versions prior to X8.1.1 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending crafted SDP packets...

CVE-2014-3370: Undefined Security Weakness

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.1.1 allow remote attackers to cause a denial of service device reload via crafted SIP packets, aka Bug IDs CSCum60442 and CSCum60447...

PT-2014-5295

Name of the Vulnerable Software and Affected Versions Cisco Intrusion Prevention System IPS Software versions 7.17E4 and earlier Description A race condition exists in the IP logging feature, allowing remote attackers to cause a denial of service device reload via crafted IP traffic that matches ...

CVE-2014-3406: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the IP logging feature in Cisco Intrusion Prevention System IPS Software 7.17E4 and earlier allows remote attackers to cause a denial of service device reload via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085...

PT-2014-5259

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Video Communication Server VCS and Expressway Software versions prior to X8.2 Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a high rate of crafted packet...

CVE-2014-3368: Undefined Security Weakness

Cisco TelePresence Video Communication Server VCS and Expressway Software before X8.2 allow remote attackers to cause a denial of service device reload via a high rate of crafted packets, aka Bug ID CSCui06507...

Cisco Intrusion Prevention System IP Logging Denial of Service Vulnerability

A vulnerability in the IP logging feature of Cisco Intrusion Prevention System IPS Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to a race condition when writing the IP logging file. An attacker could exploit this...

CVE-2014-3388

The DNS inspection engine in Cisco ASA Software 9.0 before 9.04.13, 9.1 before 9.15.7, and 9.2 before 9.22 allows remote attackers to cause a denial of service device reload via crafted DNS packets, aka Bug ID CSCuo68327...

Code injection

The GPRS Tunneling Protocol GTP inspection engine in Cisco ASA Software 8.2 before 8.25.51, 8.4 before 8.47.15, 8.7 before 8.71.13, 9.0 before 9.04.8, and 9.1 before 9.15.1 allows remote attackers to cause a denial of service device reload via a crafted series of GTP packets, aka Bug ID CSCum5639...