CVE-2015-4293

Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability (CVE-2015-4293) affects Cisco IOS-XE 3.13S and earlier, where the packet reassembly subsystem can be triggered by a stream of fragmented IPv4/IPv6 packets. The root cause is an ATTN-3-SYNC_TIMEOUT error message emitted during faile...

CVE-2015-4293

The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service CPU consumption or packet loss via fragmented 1 IPv4 or 2 IPv6 packets that trigger ATTN-3-SYNCTIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957...

Cisco Releases Security Updates

Cisco has released software updates to address a vulnerability in Cisco IOS XE Software for ASR 1000 Series Aggregation Services Routers. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to review...

CVE-2015-4293: Undefined Security Weakness

The packet-reassembly implementation in Cisco IOS XE 3.13S and earlier allows remote attackers to cause a denial of service CPU consumption or packet loss via fragmented 1 IPv4 or 2 IPv6 packets that trigger ATTN-3-SYNCTIMEOUT errors after reassembly failures, aka Bug ID CSCuo37957...

Cisco IOS XE Software TFTP DoS (cisco-sa-20150722-tftp)

According to its self-reported version, the Cisco IOS XE software running on the remote device is affected by a denial of service vulnerability in the TFTP server functionality due to incorrect management of memory when handling TFTP requests. A remote, unauthenticated attacker can exploit this b...

Cisco IOS-XE Fragmented Packet Resource Consumption Vulnerability

A vulnerability in the packet reassembly subsystem of Cisco IOS-XE could allow an unauthenticated, remote attacker to consume CPU resources which may lead to a denial of service DoS condition. The vulnerability is due to an error message that is triggered to the console and the syslog when a...

Design/Logic Flaw

The TFTP server in Cisco IOS 12.244SQ1, 12.233XN1, 12.425eJAM1, 12.425eJAO5m, 12.423JY, 15.02ED1, 15.02EY3, 15.13SVF4a, and 15.22JB1 and IOS XE 2.5.x, 2.6.x, 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, and 3.5.xS before 3.6.0S; 3.1.xSG, 3.2.xSG, and 3.3.xSG before 3.4.0SG; 3.2.xSE before 3.3.0SE; 3.2.xXO...

CVE-2015-0681

Cisco IOS and IOS XE TFTP server denial-of-service vulnerability (CVE-2015-0681) allows remote attackers to cause device hang or reload due to improper memory management when processing multiple TFTP requests. Affects several Cisco IOS/IOS XE releases prior to versions 3.6.0S and related branches...

Design/Logic Flaw

The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service device reload by sending malformed PPPoE Active Discovery Request PADR packets on the local network, aka Bug ID CSCty94202...

CVE-2015-4243

CVE-2015-4243 affects Cisco IOS XE 3.5.0S on Cisco ASR 1000 routers. The issue is in PPPoE processing where malformed PPPoE Active Discovery Request (PADR) packets can be exploited by an unauthenticated, adjacent attacker to cause a denial of service (device reload) on the local network. Root cau...

CVE-2015-4243

The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service device reload by sending malformed PPPoE Active Discovery Request PADR packets on the local network, aka Bug ID CSCty94202...

CVE-2015-4243: Undefined Security Weakness

The PPPoE establishment implementation in Cisco IOS XE 3.5.0S on ASR 1000 devices allows remote attackers to cause a denial of service device reload by sending malformed PPPoE Active Discovery Request PADR packets on the local network, aka Bug ID CSCty94202...

Cisco IOS XE Software for 1000 Series Aggregation Services Routers H.323 DoS

Cisco IOS XE Software for 1000 Series Aggregation Services Routers ASR is affected by a flaw in the Embedded Services Processor ESP due to improper handling of malformed H.323 packets when the device is configured to use Network Address Translation NAT. An unauthenticated, remote attacker by...

Cisco IOS XE DHCPv6 Server DoS

According to its self-reported version, the version of Cisco IOS XE running on the remote host is affected by a denial of service vulnerability in the DHCPv6 server implementation due to improper handling of DHCPv6 packets for SOLICIT messages for Identity Association for Non-Temporary Addresses...

Cisco IOS XE Software Overlay Transport Virtualization (OTV) DoS

The remote Cisco device is affected by a denial of service vulnerability due to improper processing of oversized Overlay Transport Virtualization OTV frames. An unauthenticated, adjacent attacker can exploit this, by sending a large number of oversized OTV frames requiring fragmentation and...

CVE-2015-0708

Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service device crash by including an IANA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956...

Input validation

The Overlay Transport Virtualization OTV implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service device reload via a series of packets that are considered oversized and trigger improper fragmentation handling, aka Bug IDs CSCup37676 and CSCup30335...

Design/Logic Flaw

Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service device crash by including an IANA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956...

CVE-2015-0710

The Overlay Transport Virtualization OTV implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service device reload via a series of packets that are considered oversized and trigger improper fragmentation handling, aka Bug IDs CSCup37676 and CSCup30335...

CVE-2015-0710

Cisco IOS XE Software OTV DoS vulnerability (CVE-2015-0710) affects the Overlay Transport Virtualization (OTV) processing in IOS XE 3.10S. The root cause is improper handling of oversized OTV frames that require fragmentation/reassembly. An unauthenticated, adjacent attacker can send a flood of o...