CVE-2012-1344: Improper Restriction of Operations within the Bounds of a Memory Buffer

Cisco IOS 15.1 and 15.2, when a clientless SSL VPN is configured, allows remote authenticated users to cause a denial of service device reload by using a web browser to refresh the SSL VPN portal page, as demonstrated by the Android browser, aka Bug ID CSCtr86328...

PT-2012-3206

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.4 through 2.0 Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload, by sending a malformed SNMP request to a Fabric Interconnect device...

CVE-2012-1340: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Fibre Channel over IP FCIP implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause a denial of service module reload via a crafted FCIP header, aka Bug ID CSCtn93151...

CVE-2012-1338: Concurrent Execution using Shared Resource with Improper Synchronization

Cisco IOS 15.0 and 15.1 on Catalyst 3560 and 3750 series switches allows remote authenticated users to cause a denial of service device reload by completing local web authentication quickly, aka Bug ID CSCts88664...

CVE-2012-1364: Undefined Security Weakness

Cisco Unified Computing System UCS 1.4 and 2.0 allows remote authenticated users to cause a denial of service device reload via a malformed SNMP request to a Fabric Interconnect FI device, aka Bug ID CSCts32452...

PT-2012-3205

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.4 through 2.0 Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload, by sending a malformed SNMP request to a Fabric Interconnect device...

PT-2012-3197

Name of the Vulnerable Software and Affected Versions Cisco MDS NX-OS versions 4.2 and 5.2 Description The issue allows remote attackers to cause a denial of service, resulting in a module reload, by sending a crafted FCIP header. Recommendations For Cisco MDS NX-OS version 4.2, update to a versi...

PT-2012-3199

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1 through 15.2 Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload. This can be achieved by using a web browser to refresh the SSL VPN portal page when a...

PT-2012-3195

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 and 15.1 on Catalyst 3560 and 3750 series switches Description The issue allows remote authenticated users to cause a denial of service, resulting in a device reload, by completing local web authentication quickly...

PT-2012-3203

Name of the Vulnerable Software and Affected Versions Cisco Nexus 5000 series switches NX-OS versions 5.0 through 5.1 Description The issue is related to the igmp snoop orib fill source update function in the IGMP process, which allows remote attackers to cause a denial of service, resulting in a...

Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Denial of Service Vulnerability

Cisco ASA 5500 Series Adaptive Security Appliances Cisco ASA and Cisco Catalyst 6500 Series ASA Services Module Cisco ASASM contain a vulnerability that may allow an unauthenticated, remote attacker to cause the reload of the affected device. Cisco has released software updates that address this...

CVE-2012-3562

Opera before 12.00 Beta allows user-assisted remote attackers to cause a denial of service application crash via a crafted web page that is not properly handled during a reload, as demonstrated by a "multiple origin camera test" page...

Cisco ASA 5500 Series Multiple Vulnerabilities (cisco-sa-20120314-asa)

The remote Cisco ASA is missing a security patch and may be affected by the following issues : - When UDP inspection is enabled, inspecting malformed transit traffic could cause the device to reload. CVE-2012-0353 - When the Threat Detection feature is configured with the Scanning Threat Mode...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS Software Traffic Optimization Features Advisory ID: cisco-sa-20120328-mace Revision 1.0 For Public Release 2012 March 28 16:00 UTC GMT...

Cisco IOS Software Smart Install Denial of Service Vulnerability (cisco-sa-20120328-smartinstall)

Cisco IOS Software contains a vulnerability in the Smart Install feature that could allow an unauthenticated, remote attacker to cause a reload of an affected device if the Smart Install feature is enabled. The vulnerability is triggered when an affected device processes a malformed Smart Install...

CVE-2012-0381

The IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service device reload by sending IKE UDP packets over...

CVE-2012-1312

The MACE feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service device reload via crafted transit traffic, aka Bug IDs CSCtq64987 and CSCtu57226...

CVE-2012-1314

The WAAS Express feature in Cisco IOS 15.1 and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit traffic, aka Bug ID CSCtt45381...

Design/Logic Flaw

The Multicast Source Discovery Protocol MSDP implementation in Cisco IOS 12.0, 12.2 through 12.4, and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS through 3.4.xS before 3.4.1S and 3.1.xSG and 3.2.xSG before 3.2.2SG allows remote attackers to cause a denial of service device reload...

Design/Logic Flaw

Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via malformed transit H.323 traffic, aka Bug ID CSCtq45553...