CVE-2013-6705

The IP Device Tracking IPDT feature in Cisco IOS and IOS XE allows remote attackers to cause a denial of service IPDT AVL corruption and device reload via a crafted sequence of ARP packets, aka Bug ID CSCuh38133...

CVE-2013-6704

CVE-2013-6704 affects Cisco IOS XE; the vulnerability is due to a memory handling defect in the flow manager when processing TFTP UDP traffic. This can allow a remote, unauthenticated attacker to exhaust device memory via TFTP client or server traffic, potentially causing a crash or instability. ...

CVE-2013-6705

Cisco IOS and IOS XE IP Device Tracking (IPDT) is affected by CVE-2013-6705, allowing remote, unauthenticated attackers to trigger a denial-of-service that leads to an IPDT AVL corruption and device reload via a crafted sequence of ARP packets (Bug CSCuh38133). The linked sources describe the vul...

PT-2013-6090

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description The issue arises from improper memory management for TFTP UDP flows, allowing remote attackers to cause a denial of service through memory consumption. This can be achieved via TFTP clie...

CVE-2013-6704: Undefined Security Weakness

Cisco IOS XE does not properly manage memory for TFTP UDP flows, which allows remote attackers to cause a denial of service memory consumption via TFTP 1 client or 2 server traffic, aka Bug IDs CSCuh09324 and CSCty42686...

PT-2013-6091

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE affected versions not specified Description The issue allows remote attackers to cause a denial of service, resulting in IPDT AVL corruption and device reload, via a crafted sequence of ARP packets. Recommendations At the...

CVE-2013-6706

CVE-2013-6706 affects the Cisco IOS XE Express Forwarding processing module. The vulnerability arises from improper MPLS packet handling during IP header validation, allowing remote attackers to trigger a denial of service (device reload). Cisco’s advisory notes this in IOS XE Software IP Header ...

PT-2013-6092

Name of the Vulnerable Software and Affected Versions Cisco IOS XE affected versions not specified Description A denial of service issue exists due to improper handling of Multiprotocol Label Switching MPLS packets during IP header validation. This could allow an unauthenticated, remote attacker ...

CVE-2013-6706: Improper Input Validation

The Cisco Express Forwarding processing module in Cisco IOS XE allows remote attackers to cause a denial of service device reload via crafted MPLS packets that are not properly handled during IP header validation, aka Bug ID CSCuj23992...

CVE-2013-6692

Cisco IOS XE 3.8S.2 and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service device reload via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949...

CVE-2013-6692

Cisco IOS XE 3.8S.2 and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service device reload via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949...

CVE-2013-6692

CVE-2013-6692 affects Cisco IOS XE (3.8S(.2) and earlier). The issue lies in DHCP pool handling during IP address assignment for AAA clients, causing a denial of service that can reboot the device when processing an AAA packet that triggers an address requirement. An authenticated remote attacker...

CVE-2013-6692: Undefined Security Weakness

Cisco IOS XE 3.8S.2 and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service device reload via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949...

Cisco IOS XE Software AAA DHCP Denial of Service Vulnerability

A vulnerability in a DHCP function that assigns IP addresses to AAA clients on Cisco IOS XE Software could allow an authenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to improper processing of AAA packets that require IP address assignment from a DHC...

PT-2013-6079

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.8S.2 and earlier Description A issue in the DHCP function that assigns IP addresses to AAA clients allows remote authenticated users to cause a denial of service, resulting in a device reload. This is due to improper...

Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers (cisco-sa-20131030-asr1000)

Cisco IOS XE Software for 1000 Series Aggregation Services Routers ASR contains the following denial of service DoS vulnerabilities : - Cisco IOS XE Software TCP Segment Reassembly Denial of Service Vulnerability CVE-2013-5543 - Cisco IOS XE Software Malformed EoGRE Packet Denial of Service...

CVE-2013-5546

The TCP reassembly feature in Cisco IOS XE 3.7 before 3.7.3S and 3.8 before 3.8.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via large TCP packets that are processed by the 1 NAT or 2 ALG component, aka Bug ID CSCud72509...

CVE-2013-5547

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending malformed EoGRE packets over 1 IPv4 or 2 IPv6, aka Bug ID CSCuf08269...

CVE-2013-5543

Cisco IOS XE 3.4 before 3.4.2S and 3.5 before 3.5.1S on 1000 ASR devices allows remote attackers to cause a denial of service device reload via malformed ICMP error packets associated with a 1 TCP or 2 UDP session that is under inspection by the Zone-Based Firewall ZBFW component, aka Bug ID...

CVE-2013-5545

The PPTP ALG implementation in Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service device reload by sending many PPTP packets over NAT, aka Bug ID CSCuh19936...