PT-2013-5627

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.7 before 3.7.3S Cisco IOS XE versions 3.8 before 3.8.1S Description The issue allows remote attackers to cause a denial of service via large TCP packets processed by the NAT or ALG component. Successful exploitation cou...

PT-2013-5628

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.9 through 3.9.2S Description The issue allows remote attackers to cause a denial of service by sending malformed EoGRE packets over IPv4 or IPv6. Successful exploitation could trigger a reload of the embedded services...

Design/Logic Flaw

The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030...

CVE-2013-5527

The vulnerability CVE-2013-5527 affects Cisco IOS and IOS XE OSPF implementations, specifically the OSPF opaque LSA (type 11) handling. The root cause is improper parsing of certain options in OSPF LSA type 11 packets, which can be exploited remotely by an unauthenticated attacker to trigger a de...

PT-2013-5608

Name of the Vulnerable Software and Affected Versions Cisco IOS and IOS XE affected versions not specified Description The issue is related to the OSPF functionality, which allows remote attackers to cause a denial of service device reload via crafted options in an LSA type 11 packet. This is due...

CVE-2013-5527: Improper Input Validation

The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service device reload via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030...

Cisco IOS XE Software Internet Key Exchange Memory Leak Vulnerability (cisco-sa-20130925-ike)

A vulnerability in the Internet Key Exchange IKE protocol of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a device reload. The vulnerability is due to incorrect handling of malformed IKE packets by the affected software. An attack...

Cisco IOS XE Software DHCP Denial of Service Vulnerability (cisco-sa-20130925-dhcp)

A vulnerability in the DHCP implementation of Cisco IOS XE Software allows an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability occurs during the parsing of crafted DHCP packets. An attacker can exploit this vulnerability by sending crafted DHCP packet...

Cisco IOS XE Software Resource Reservation Protocol Interface Queue Wedge Vulnerability (cisco-sa-20130925-rsvp)

A vulnerability in the Resource Reservation Protocol RSVP feature of Cisco IOS XE Software allows an unauthenticated, remote attacker to trigger an interface queue wedge on the affected device. The vulnerability is due to improper parsing of UDP RSVP packets. An attacker can exploit this...

Memory corruption

Memory leak in Cisco IOS 12.2, 15.1, and 15.2; IOS XE 3.4.2S through 3.4.5S; and IOS XE 3.6.xS before 3.6.1S allows remote attackers to cause a denial of service memory consumption or device reload via malformed IKEv1 packets, aka Bug ID CSCtx66011...

Code injection

The NTP implementation in Cisco IOS 12.0 through 12.4 and 15.0 through 15.1, and IOS XE 2.1 through 3.3, does not properly handle encapsulation of multicast NTP packets within MSDP SA messages, which allows remote attackers to cause a denial of service device reload by leveraging an MSDP peer...

CVE-2013-5475

Cisco IOS/IOS XE DHCP Denial of Service (CVE-2013-5475): Affects Cisco IOS 12.2–12.4 and 15.0–15.3, and IOS XE 2.1–3.9. Vulnerability arises during parsing of crafted DHCP packets processed by the DHCP server or DHCP relay, potentially triggering a device reload. Remediation: Cisco (and Red Hat/N...

CVE-2013-5478

CVE-2013-5478 describes a DoS vulnerability in Cisco IOS/IOS XE where, if a VRF interface exists, remote attackers can trigger an interface queue wedge by sending crafted UDP RSVP packets. Affected software includes Cisco IOS 15.0–15.3 and IOS XE 3.2–3.8; the underlying root cause is improper par...

CVE-2013-5478

Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service interface queue wedge via crafted UDP RSVP packets, aka Bug ID CSCuf17023...

CVE-2013-5478: Improper Input Validation

Cisco IOS 15.0 through 15.3 and IOS XE 3.2 through 3.8, when a VRF interface exists, allows remote attackers to cause a denial of service interface queue wedge via crafted UDP RSVP packets, aka Bug ID CSCuf17023...

Cisco IOS Software Internet Key Exchange Memory Leak Vulnerability

A vulnerability in the Internet Key Exchange IKE protocol of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak that could lead to a device reload. The vulnerability is due to incorrect handling of malformed IKE packets by the...

PT-2013-5563

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2, 15.1, and 15.2 Cisco IOS XE versions 3.4.2S through 3.4.5S Cisco IOS XE versions 3.6.xS before 3.6.1S Description A memory leak in the Internet Key Exchange IKE protocol could allow an unauthenticated, remote attacker ...

PT-2013-1008

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.3 Cisco IOS XE versions 3.2 through 3.8 Description A vulnerability in the Resource Reservation Protocol RSVP feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote...

PT-2013-1010

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.3 Cisco IOS XE versions 2.1 through 3.9 Description The issue is related to insufficient input validation in the DHCP implementation, allowing a remote attacker to cause a denial of...

OSPF LSA Manipulation Vulnerability in Cisco IOS XE (cisco-sa-20130801-lsaospf)

The remote Cisco IOS XE device is affected by a vulnerability involving the Open Shortest Path First OSPF Routing Protocol Link State Advertisement LSA database. A remote, unauthenticated attacker can exploit this vulnerability, via specially crafted OSPF packets, to manipulate or disrupt the flo...