Cisco IOS Software and Cisco IOS XE Software Crafted RADIUS Packet Denial of Service Vulnerability

A vulnerability in Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper processing of crafted RADIUS packets by a device running the affected software. An authenticated, remote...

Cisco IOS Software and Cisco IOS XE Software Crafted DHCPv6 Sequence Denial of Service Vulnerability

A vulnerability in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of DHCPv6 packets for a SOLICIT message for an Identity Association for Non-Temporary Address...

Cisco IOS XE Fragmented Packet DoS

The Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the high-speed logging HSL feature due to improper processing of fragmented IP packets. An unauthenticated, remote attacker, by sending a large number of oversized packets, can exploit this ...

Cisco IOS XE IPv6 DoS

The Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability due to improper parsing of IPv6 packets. An unauthenticated, remote attacker, using crafted IPv6 packets, can exploit this to cause a device reload. TRUSTED...

Cisco IOS XE Autonomic Networking Infrastructure Multiple Vulnerabilities (cisco-sa-20150325-ani)

According to its self-reported version, the version of Cisco IOS running on the remote host is affected by the following vulnerabilities : - A flaw exists in the ANI due to failing to properly validate Autonomic Networking AN messages. This could allow a remote attacker to spoof an Autonomic...

Cisco IOS XE Common Flow Table DoS

The Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Common Flow Table CFT feature due to improper processing of IPv6 packets encapsulated inside IPv4 UDP packets. An unauthenticated, remote attacker, using malformed packets, can exploit...

Cisco IOS XE Layer 4 Redirect DoS

The Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability due to improper processing of IP packets by the Layer 4 Redirect L4R feature. An unauthenticated, remote attacker, using crafted IPv4 or IPv6 packets, can exploit this to cause a device reload...

Cisco IOS XE AppNav Component RCE

The Cisco IOS XE software running on the remote device is affected by a vulnerability in the AppNav component due to the improper processing of TCP packets. An unauthenticated, remote attacker, using a crafted TCP packet, can exploit this to cause a device reload or to execute arbitrary code in t...

CVE-2015-0688

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

Code injection

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

CVE-2015-0688

Cisco IOS XE 3.10.2S on an ASR 1000 device with an Embedded Services Processor ESP module, when NAT is enabled, allows remote attackers to cause a denial of service module crash via malformed H.323 packets, aka Bug ID CSCup21070...

CVE-2015-0688

CVE-2015-0688 affects Cisco IOS XE 3.10.2S on ASR 1000 with an Embedded Services Processor (ESP). The issue arises when NAT is enabled and malformed H.323 packets are processed, allowing an unauthenticated, remote attacker to cause a denial of service by crashing the ESP module. Exploitation is r...

Cisco ASR1000 Series Routers ESP Module Denial of Service Vulnerability

A vulnerability in the Embedded Services Processor ESP module of Cisco ASR 1000 Series Routers running Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to improper handling of malformed H.323 packets by an...

CVE-2015-0685

Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service device hang via crafted IP packets, aka Bug ID CSCub31873...

Design/Logic Flaw

Cisco IOS XE before 3.7.5S on ASR 1000 devices does not properly handle route adjacencies, which allows remote attackers to cause a denial of service device hang via crafted IP packets, aka Bug ID CSCub31873...

CVE-2015-0685

Cisco IOS XE before 3.7.5S on ASR 1000 devices is vulnerable to DoS due to improper handling of route adjacencies, exploitable by remote attackers sending crafted IP packets. The root cause is improper processing of route adjacencies in the affected code path. Impact is device hang/DoS. Cisco has...

Cisco IOS XE Software TCP Memory Leak DoS (cisco-sa-20150325-tcpleak)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a memory leak issue in the TCP input module when establishing a three-way handshake. An unauthenticated, remote attacker can exploit this issue, via specially crafted TCP packets, to...

Cisco IOS XE IKEv2 DoS (cisco-sa-20150325-ikev2)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange version 2 IKEv2 subsystem due to improper handling of specially crafted IKEv2 packets. A remote, unauthenticated attacker ca...

Cisco IOS XE Software mDNS Gateway DoS

The remote Cisco device is running a version of Cisco IOS XE software that is affected by a vulnerability in the multicast DNS gateway component due to improper validation of mDNS packets. A remote, unauthenticated attacker, by sending crafted packets to UDP port 5353, can exploit this to cause a...

Cisco IOS/IOS XE Malformed ANRA Answer Message Restriction Bypass Denial of Service Vulnerability

Cisco IOS is a popular Internet operating system. A security vulnerability exists in the Cisco IOS and Cisco IOS XE ANI implementations, which allows remote attackers to exploit the vulnerability to bypass device and node access notifications by sending spoofed ANRA response message telegrams or...