CVE-2013-1164

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1164 due to improper implementation of the Cisco Multicast Leaf Recycle Elimination (MLRE) feature, enabling remote attackers to trigger a DoS (card reload) via fragmented IPv6 multicast packets. Affected versions include 3.4 before ...

CVE-2013-2779

CVE-2013-2779 affects Cisco IOS XE on 1000‑series ASR: MLRE flaw that allows remote DoS via fragmented IPv6 MVPN/MVPNv6 packets. Vulnerable in IOS XE 3.4 before 3.4.5S and 3.5–3.7 before 3.7.1S; fix released in 3.4.5S and 3.7.1S/series guidance per advisory. Affected products and specific compone...

CVE-2013-1167

CVE-2013-1167 affects Cisco IOS XE on 1000 Series ASR routers: versions 3.2–3.4 before 3.4.2S and 3.5, with bridge domain interface (BDI) enabled. A remote attacker can trigger a denial of service (card reload) by sending packets that are mishandled during encapsulation processing, per Bug ID CSC...

CVE-2012-5723

Cisco ASR 1000 devices running software before 3.8S are affected when BDI routing is enabled. The issue allows remote attackers to trigger a denial of service (device reload) by sending crafted ICMP packets (broadcast or multicast) with fragmentation. This is associated with Bug ID CSCub55948. Th...

CVE-2013-1165

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1165. The issue, tracked as Bug CSCtz23293, allows an unauthenticated, remote attacker to trigger a denial of service (card reload) by sending many crafted L2TP packets. Affected software lines are IOS XE 2.x and 3.x before 3.4.5S, a...

CVE-2013-1166

CVE-2013-1166 affects Cisco IOS XE on 1000 Series ASR routers (versions 3.2–3.4 up to 3.4.5S and 3.5–3.7 up to 3.7.1S). When VRF-aware NAT and SIP ALG are enabled, remote attackers can trigger a denial of service via a flood of SIP packets, potentially causing a reload of the ESP/RP cards and ser...

CVE-2013-5543

CVE-2013-5543 affects Cisco IOS XE on 1000 Series ASR routers. A vulnerability in the Zone-Based Firewall (ZBFW) handling allows remote attackers to trigger a device reload via malformed ICMP error packets bound to an active TCP/UDP session (Bug CSCtt26470). Affected versions are IOS XE 3.4 prior...

CVE-2013-5545

Cisco IOS XE PPTP ALG vulnerability (CVE-2013-5545) affects 1000-series ASR devices running 3.9 before 3.9.2S. The issue—described as a PPTP ALG handling flaw—allows unauthenticated, remote attackers to trigger a reload of ESP/RP and cause a DoS by sending many PPTP packets over NAT. Connected do...

CVE-2013-5546

The CVE-2013-5546 issue affects Cisco IOS XE on 1000 ASR devices, specifically in TCP reassembly. Affects the NAT and ALG processing paths where large TCP packets can trigger a device reload, causing a denial of service. Root cause: improper handling in TCP reassembly leading to crash under certa...

CVE-2012-5017

CVE-2012-5017 affects Cisco IOS before 15.1(1)SY1. The issue arises in the VPN/IKEv2 processing where remote authenticated users can trigger a denial of service (device reload) by establishing a VPN session and sending malformed IKEv2 packets. Connected documents confirm the vulnerable condition,...

CVE-2014-3284

Cisco IOS XE on ASR1000 devices with PPPoE termination enabled is vulnerable to a DoS via malformed PPPoE packets, causing a device reload. The issue stems from improper PPPoE processing and can be triggered remotely by an attacker in the same broadcast/collision domain. Multiple sources confirm ...

CVE-2012-1366

CVE-2012-1366 affects Cisco IOS on ASR 1000 devices prior to 15.1(1)SY, where enabling IPv6 Multicast Listener Discovery (MLD) tracking allows remote attackers to cause a denial of service (device reload) by sending crafted MLD packets (Bug ID CSCtz28544). Connected sources confirm the vulnerabil...

CVE-2013-5547

Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices is affected by CVE-2013-5547, where malformed EoGRE packets over IPv4/IPv6 can cause a remote denial of service (device reload). This is documented in Cisco advisory Cisco-SA-20131030-ASR1000 and mirrored in NVD/Red Hat records. The root cause is...

CVE-2014-2183

The CVE-2014-2183 issue concerns Cisco IOS XE on ASR 1000 Series routers (3.10S(.2) and earlier). The L2TP module can be triggered by malformed L2TP packets over the network, causing a denial-of-service via ESP card reload. Exploitation requires authenticated access; impact is a reload of the ESP...