CVE-2013-1167

CVE-2013-1167 affects Cisco IOS XE on 1000 Series ASR routers: versions 3.2–3.4 before 3.4.2S and 3.5, with bridge domain interface (BDI) enabled. A remote attacker can trigger a denial of service (card reload) by sending packets that are mishandled during encapsulation processing, per Bug ID CSC...

CVE-2013-2779

CVE-2013-2779 affects Cisco IOS XE on 1000‑series ASR: MLRE flaw that allows remote DoS via fragmented IPv6 MVPN/MVPNv6 packets. Vulnerable in IOS XE 3.4 before 3.4.5S and 3.5–3.7 before 3.7.1S; fix released in 3.4.5S and 3.7.1S/series guidance per advisory. Affected products and specific compone...

CVE-2012-5723

Cisco ASR 1000 devices running software before 3.8S are affected when BDI routing is enabled. The issue allows remote attackers to trigger a denial of service (device reload) by sending crafted ICMP packets (broadcast or multicast) with fragmentation. This is associated with Bug ID CSCub55948. Th...

CVE-2013-1165

Cisco IOS XE on 1000 Series ASR routers is affected by CVE-2013-1165. The issue, tracked as Bug CSCtz23293, allows an unauthenticated, remote attacker to trigger a denial of service (card reload) by sending many crafted L2TP packets. Affected software lines are IOS XE 2.x and 3.x before 3.4.5S, a...

CVE-2013-1166

CVE-2013-1166 affects Cisco IOS XE on 1000 Series ASR routers (versions 3.2–3.4 up to 3.4.5S and 3.5–3.7 up to 3.7.1S). When VRF-aware NAT and SIP ALG are enabled, remote attackers can trigger a denial of service via a flood of SIP packets, potentially causing a reload of the ESP/RP cards and ser...

CVE-2014-3284

Cisco IOS XE on ASR1000 devices with PPPoE termination enabled is vulnerable to a DoS via malformed PPPoE packets, causing a device reload. The issue stems from improper PPPoE processing and can be triggered remotely by an attacker in the same broadcast/collision domain. Multiple sources confirm ...

CVE-2012-5017

CVE-2012-5017 affects Cisco IOS before 15.1(1)SY1. The issue arises in the VPN/IKEv2 processing where remote authenticated users can trigger a denial of service (device reload) by establishing a VPN session and sending malformed IKEv2 packets. Connected documents confirm the vulnerable condition,...

CVE-2012-1366

CVE-2012-1366 affects Cisco IOS on ASR 1000 devices prior to 15.1(1)SY, where enabling IPv6 Multicast Listener Discovery (MLD) tracking allows remote attackers to cause a denial of service (device reload) by sending crafted MLD packets (Bug ID CSCtz28544). Connected sources confirm the vulnerabil...

CVE-2014-2183

The CVE-2014-2183 issue concerns Cisco IOS XE on ASR 1000 Series routers (3.10S(.2) and earlier). The L2TP module can be triggered by malformed L2TP packets over the network, causing a denial-of-service via ESP card reload. Exploitation requires authenticated access; impact is a reload of the ESP...