Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in several products. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review the following Cisco Security Advisories and appl...

Cisco Carrier Routing System IPv6 Denial of Service Vulnerability

A vulnerability in IPv6 over MPLS packet processing of Cisco IOS XR for Cisco Carrier Routing System CRS platforms could allow an unauthenticated, adjacent attacker to cause a reload of the affected line card. The vulnerability is due to insufficient logic in processing of crafted IPv6 over MPLS...

Cisco IOS XR Software Crafted IPv6 Packet Denial of Service Vulnerability

A vulnerability in the IP version 6 IPv6 processing code of Cisco IOS XR Software for Cisco CRS-3 Carrier Routing System could allow an unauthenticated, remote attacker to trigger an ASIC scan of the Network Processor Unit NPU and a reload of the line card processing an IPv6 packet. The...

Cisco IOS XR Denial-of-Service Vulnerability

Cisco has identified a vulnerability that could allow an unauthenticated remote attacker to cause a denial-of-service condition. The vulnerability is due to improper processing of malformed IPv6 packets carrying extension headers. A Cisco Carrier Routing System 3 CRS-3 running a version of Cisco...

CVE-2013-1112

Cisco Carrier Routing System CRS allows remote attackers to cause a denial of service packet loss via short malformed packets that trigger inefficient processing, aka Bug ID CSCud79136...

CVE-2013-1112

Cisco Carrier Routing System CRS allows remote attackers to cause a denial of service packet loss via short malformed packets that trigger inefficient processing, aka Bug ID CSCud79136...

Cisco Carrier Routing System Small Packets Denial of Service Vulnerability

Cisco Carrier Routing System CRS contains a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on a targeted system. The vulnerability is due to the improper handling of malformed packets processed by the affected software. An...

Cisco Carrier Routing System Security Bypass Vulnerability

Cisco Carrier Routing System contains a vulnerability that could allow an unauthenticated, remote attacker to bypass security protections and gain unauthorized network access. The vulnerability is due to improper handling of IP version 4 IPv4 fragments in the affected device. An unauthenticated,...

Design/Logic Flaw

Cisco Carrier Routing System CRS 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975...

CVE-2012-1342

Cisco Carrier Routing System CRS 3.9, 4.0, and 4.1 allows remote attackers to bypass ACL entries via fragmented packets, aka Bug ID CSCtj10975...

Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco IOS XR Software Route Processor Denial of Service Vulnerability Advisory ID: cisco-sa-20120530-iosxr Revision 1.0 For Public Release 2012 May 30 16:00 UTC GMT +--------------------------------------------------------------------- Summary =====...

CVE-2011-3283

Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service Metro subsystem crash via a fragmented GRE packet, aka Bug ID CSCts14887...

CVE-2011-3283

Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service Metro subsystem crash via a fragmented GRE packet, aka Bug ID CSCts14887...

CVE-2011-3283

Cisco Carrier Routing System 3.9.1 is affected by a vulnerability that allows remote attackers to cause a denial of service (Metro subsystem crash) through a fragmented GRE packet (Bug ID CSCts14887). The available sources specify the affected product and version and the attack vector as network-...