Cisco IOS XR Software Standby Route Processor Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability

A vulnerability in the access control list ACL functionality of the standby route processor management interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to reach the configured IP addresses on the standby route processor management Gigabit Ethernet Management...

CVE-2019-1749

A vulnerability in the ingress traffic validation of Cisco IOS XE Software for Cisco Aggregation Services Router ASR 900 Route Switch Processor 3 RSP3 could allow an unauthenticated, adjacent attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The...

Cisco IOS XR NCS 6000 Packet Timer Leak DoS (cisco-sa-20160713-ncs6k)

The version of Cisco IOS XR running on the remote NCS 6000 device is affected by a denial of service vulnerability due to improper management of system timer resources. An unauthenticated, remote attacker can exploit this, via numerous management connections to the affected device, to consume...

CVE-2016-1426: Undefined Security Weakness

Cisco IOS XR 5.x through 5.2.5 on NCS 6000 devices allows remote attackers to cause a denial of service timer consumption and Route Processor reload via crafted SSH traffic, aka Bug ID CSCux76819...

CVE-2012-1317

The multicast implementation in Cisco IOS before 15.11SY allows remote attackers to cause a denial of service Route Processor crash by sending packets at a high rate, aka Bug ID CSCts37717...

Information disclosure

The multicast implementation in Cisco IOS before 15.11SY allows remote attackers to cause a denial of service Route Processor crash by sending packets at a high rate, aka Bug ID CSCts37717...

CVE-2012-1317

The CVE-2012-1317 entry affects Cisco IOS multicast handling. Affected: Cisco IOS before 15.1(1)SY. Vulnerability: multicast processing can be abused by remote attackers sending high-rate packets, causing a denial of service via Route Processor crash (Bug ID CSCts37717). There is no exploitation ...

CVE-2012-1317

The multicast implementation in Cisco IOS before 15.11SY allows remote attackers to cause a denial of service Route Processor crash by sending packets at a high rate, aka Bug ID CSCts37717...

CVE-2012-1317: Improper Restriction of Operations within the Bounds of a Memory Buffer

The multicast implementation in Cisco IOS before 15.11SY allows remote attackers to cause a denial of service Route Processor crash by sending packets at a high rate, aka Bug ID CSCts37717...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20131023-iosxr)

Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the 'Affected Products' section of this advisory. The vulnerability is due to improper...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability (cisco-sa-20120530-iosxr)

Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers ASR Route Switch Processor RSP-4G and RSP-8G, Route Switch Processor 440 RSP440, and Cisco...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability

Cisco IOS XR Software Releases 3.3.0 to 4.2.0 contain a vulnerability when handling fragmented packets that could result in a denial of service DoS condition of the Cisco CRS Route Processor cards listed in the "Affected Products" section of this advisory. The vulnerability is due to improper...

CVE-2013-1136

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

Design/Logic Flaw

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

CVE-2013-1136

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

CVE-2013-1136

The CVE-2013-1136 entry describes a local denial-of-service vulnerability in Cisco IOS on the Aggregation Services Router (ASR) Route Processor 2 where improper memory management of the crypto engine allows a local attacker to crash the route processor by creating multiple tunnels and then inspec...

CVE-2013-1136: Undefined Security Weakness

The crypto engine process in Cisco IOS on Aggregation Services Router ASR Route Processor 2 does not properly manage memory, which allows local users to cause a denial of service route processor crash by creating multiple tunnels and then examining encryption statistics, aka Bug ID CSCuc52193...

Cisco IOS MallocLite BGP Update DoS

The remote Cisco IOS device is affected by a denial of service vulnerability due to a flaw in the MallocLite implementation. A remote attacker, via a BGP update message with a specially crafted local-preference attribute length, can cause the route processor to crash, resulting in a denial of...

CVE-2012-1367

The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service Route Processor crash via a BGP UPDATE message with a modified local-preference aka LOCALPREF attribute length, aka Bug ID CSCtq06538...

CVE-2012-1367: Improper Input Validation

The MallocLite implementation in Cisco IOS 12.0, 12.2, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service Route Processor crash via a BGP UPDATE message with a modified local-preference aka LOCALPREF attribute length, aka Bug ID CSCtq06538...