CVE-2015-0644

AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service device reload via a crafted TCP packet, aka Bug ID...

CVE-2015-0644

CVE-2015-0644 affects Cisco IOS XE AppNav. The vulnerability arises from improper handling of TCP packets, allowing an unauthenticated, remote attacker to cause either arbitrary code execution or a device reload (DoS) via a crafted TCP packet. Affected are IOS XE 3.8–3.10 before 3.10.3S, 3.11 bef...

CVE-2015-0643

Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service memory consumption and device reload by...

CVE-2015-0642

CVE-2015-0642 affects Cisco IOS and IOS XE where the IKEv2 subsystem mishandles certain malformed packets, allowing unauthenticated remote DoS via IPv4/IPv6. Affected Cisco IOS versions include 12.2, 12.4, 15.0–15.4, and IOS XE across 2.5.x–3.12.xS (before 3.12.3S), 3.2.xE–3.7.xE (before 3.7.1E),...

CVE-2015-0643

CVE-2015-0643 relates to Cisco IOS/IOS XE IKEv2 handling that allows a remote, unauthenticated attacker to cause a DoS by sending malformed IKEv2 packets. Affected software includes Cisco IOS 12.2, 12.4, 15.0–15.4 and IOS XE 2.5.x–3.13.xS (various sub-branches) prior to the indicated fixed builds...

CVE-2015-0639

The CVE-2015-0639 issue is a DoS vulnerability in Cisco IOS XE Common Flow Table (CFT). When MMON or NBAR is enabled, processing of IPv6 packets encapsulated inside IPv4 UDP packets can be corrupted, allowing an unauthenticated, remote attacker to trigger a device reload. Affected products and ve...

CVE-2015-0645

Cisco IOS XE Layer 4 Redirect (L4R) DoS vulnerability affects IOS XE 2.x–3.x before certain fixed releases, where the L4R feature mishandles crafted IPv4/IPv6 packets. An unauthenticated, remote attacker can trigger a device reload by sending malformed traffic, per Bug ID CSCuq59131. Affected ran...

CVE-2015-0639

The Common Flow Table CFT feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S, when MMON or NBAR is enabled, allows remote attacker...

CVE-2015-0636

The Cisco ANI issue affects the Autonomic Networking Infrastructure in Cisco IOS and IOS XE. The vulnerability allows unauthenticated remote attackers to cause Denial of Service by sending spoofed Autonomic Networking (AN) messages that reset the finite state machine, disrupting domain access. Af...

CVE-2015-0640

The high-speed logging HSL feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via large IP packets that require NAT and H...

CVE-2015-0641

CVE-2015-0641 affects Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S. The flaw arises from parsing IPv6 packets, allowing an unauthenticated, remote attacker to trigger a deni...

CVE-2015-0650

Cisco IOS/IOS XE mDNS Gateway DoS (CVE-2015-0650): A vulnerability arising from improper validation of mDNS gateway UDP packets (port 5353) in Cisco IOS 12.2–12.4, 15.0–15.4 and IOS XE 3.9.xS–3.13.xS (before specific fixed versions 3.10.4S, 3.11.3S, 3.12.2S, 3.13.1S). An unauthenticated remote at...

CVE-2015-0641

Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via crafted IPv6 packets, aka Bug ID CSCub68073...

KLA10510 Multiple vulnerabilities in Cisco IOS

An unspecified vulnerabilities were found in multiple versions of Cisco IOS. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packets or messages. Original advisories -...

Multiple Vulnerabilities in Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers

Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers ASR, Cisco 4400 Series Integrated Services Routers ISR, and Cisco Cloud Services Routers CSR 1000v Series contains the following vulnerabilities: Cisco IOS XE Software Fragmented Packet Denial of Service Vulnerability...

Cisco IOS Software and IOS XE Software TCP Packet Memory Leak Vulnerability

A vulnerability in the TCP input module of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of the affected device. The vulnerability is due to improper handling of certain crafted packet sequences used in establishing ...

Cisco IOS Software and IOS XE Software mDNS Gateway Denial of Service Vulnerability

A vulnerability in the multicast DNS mDNS gateway function of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to reload the vulnerable device. The vulnerability is due to improper validation of mDNS packets. An attacker could exploit this vulnerability...

Information disclosure

The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693...

Cisco IOS XE GNU GNU C Library (glibc) Buffer Overflow (CSCus69731) (GHOST)

The remote Cisco device is running a version of Cisco IOS XE software that is potentially affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validated user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2 functions. Th...

Cisco IOS XE GNU C Library (glibc) Buffer Overflow (CSCus69732) (GHOST)

The remote Cisco device is running a version of Cisco IOS XE software that is affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validated user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2 functions. This allows a...