CVE-2015-0645: Improper Input Validation

The Layer 4 Redirect L4R feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via malformed 1 IPv4 or 2 IPv6 packets, aka B...

CVE-2015-0640: Improper Input Validation

The high-speed logging HSL feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via large IP packets that require NAT and H...

CVE-2015-0635: Improper Input Validation

The Autonomic Networking Infrastructure ANI implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to spoof Autonomic Networking Registration Authority ANRA responses, and consequently bypass intended device and...

CVE-2015-0642: Improper Input Validation

Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S allow remote attackers to cause a denial of service device reload by sending malformed IKEv2...

CVE-2015-0641: Improper Input Validation

Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service device reload via crafted IPv6 packets, aka Bug ID CSCub68073...

KLA10510 Multiple vulnerabilities in Cisco IOS

An unspecified vulnerabilities were found in multiple versions of Cisco IOS. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packets or messages. Original advisories -...

Cisco IOS Software and IOS XE Software mDNS Gateway Denial of Service Vulnerability

A vulnerability in the multicast DNS mDNS gateway function of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to reload the vulnerable device. The vulnerability is due to improper validation of mDNS packets. An attacker could exploit this vulnerability...

Multiple Vulnerabilities in Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers

Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers ASR, Cisco 4400 Series Integrated Services Routers ISR, and Cisco Cloud Services Routers CSR 1000v Series contains the following vulnerabilities: Cisco IOS XE Software Fragmented Packet Denial of Service Vulnerability...

Cisco IOS Software and IOS XE Software TCP Packet Memory Leak Vulnerability

A vulnerability in the TCP input module of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of the affected device. The vulnerability is due to improper handling of certain crafted packet sequences used in establishing ...

PT-2015-1034

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 Cisco IOS XE versions 3.9.xS through 3.10.3S Cisco IOS XE versions 3.11.xS through 3.11.2S Cisco IOS XE versions 3.12.xS through 3.12.1S Cisco IOS XE versions 3.13.xS through...

Information disclosure

The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693...

CVE-2015-0598: Undefined Security Weakness

The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted IPv6 Attributes in Access-Accept packets, aka Bug IDs CSCur84322 and CSCur27693...

Cisco IOS XE GNU C Library (glibc) Buffer Overflow (CSCus69732) (GHOST)

The remote Cisco device is running a version of Cisco IOS XE software that is affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validated user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2 functions. This allows a...

Cisco IOS XE GNU GNU C Library (glibc) Buffer Overflow (CSCus69731) (GHOST)

The remote Cisco device is running a version of Cisco IOS XE software that is potentially affected by a heap-based buffer overflow vulnerability in the GNU C Library glibc due to improperly validated user-supplied input to the nsshostnamedigitsdots, gethostbyname, and gethostbyname2 functions. Th...

CVE-2015-0632

CVE-2015-0632 concerns Cisco IOS and IOS XE with a race condition in the Neighbor Discovery (ND) protocol. This vulnerability could allow remote attackers on the local network to cause a denial of service by flooding Router Solicitation messages. The affected components are Cisco IOS/IOS XE’s ND ...

CVE-2015-0632

Race condition in the Neighbor Discovery ND protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local network, aka Bug ID CSCuo67770...

CVE-2015-0632: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Neighbor Discovery ND protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service via a flood of Router Solicitation messages on the local network, aka Bug ID CSCuo67770...

Cisco IOS XE LISP ITR DoS (CSCun73782)

The remote Cisco device is potentially affected by an issue related to the handling of certain parameters in Locator/ID Separation Protocol LISP control messages sent to the ingress tunnel router ITR component. A remote, unauthenticated attacker could exploit this issue by sending specially craft...

Cisco IOS XE Crafted MPLS IP Fragmentation DoS (CSCul00709)

According to its self-reported version, the remote IOS XE device is affected by a denial of service vulnerability. A denial of service flaw exists the Multiprotocol Label Switching MPLS IP fragmentation function of Cisco XE. An unauthenticated, remote attacker with a specially crafted MPLS IP...

CVE-2014-7990

Cisco IOS XE 3.5E and earlier on WS-C3850, WS-C3860, and AIR-CT5760 devices does not properly parse the "request system shell" challenge response, which allows local users to obtain Linux root access by leveraging administrative privilege, aka Bug ID CSCur09815...