CVE-2014-3308

Cisco IOS XR on Trident line cards in ASR 9000 devices is affected by a DoS due to a missing static punt policer. The vulnerability (Bug CSCun83985) allows remote unauthenticated attackers to cause CPU exhaustion by sending a flood of crafted packets targeting affected devices. The issue is speci...

CVE-2014-2176

Cisco IOS XR on ASR 9000 (4.1.2–5.1.1) with Trident-based line cards is affected by a vulnerability in parsing malformed IPv6 packets that can be exploited remotely to cause a denial of service (NP chip and line card reload). The issue stems from IPv6 handling and only affects Trident-based line ...

CVE-2014-3321

Cisco IOS XR Software for ASR 9000 Series (versions 4.3.4 and earlier) is affected by a denial-of-service vulnerability in MPLS packet handling on a bridge-group virtual interface (BVI). The issue arises from insufficient parsing logic for crafted MPLS packets, which can cause the network process...

CVE-2015-0694

Cisco ASR 9000 devices running software around 5.3.0.BASE are affected by CVE-2015-0694 due to an Object-ACL matching flaw (Bug CSCur28806) that can let an unauthenticated, remote attacker bypass ACL restrictions. Impact is potential access to restricted resources or traffic alteration depending ...

CVE-2014-3322

Cisco IOS XR on ASR 9000 devices is affected by a NetFlow processing DoS caused by improper sampling of malformed IPv4/IPv6 packets (Bug CSCuo68417). The issue affects Typhoon-based line cards and can cause a lockup and reload of the Network Processor chip and line card when processing malicious ...

CVE-2014-3335

Cisco IOS XR vulnerability CVE-2014-3335 affects ASR 9000 Series with Typhoon-based line cards configured for NetFlow sampling. The issue stems from improper handling of packets with multicast destination MAC addresses during NetFlow sampling, potentially causing a lockup/reload of the Network Pr...

CVE-2015-6301

The CVE-2015-6301 entry concerns Cisco IOS on ASR 9000 devices with software version 5.2.0 Base, where the DHCPv6 server is vulnerable to crafted packets that remotely cause a denial of service (process reset). The issue is due to improper handling of DHCPv6 packets and can be triggered without a...

CVE-2014-3396

Cisco IOS XR on ASR 9000 Series (Typhoon line cards) is affected by CVE-2014-3396 due to improper compression encoding of port-range and address-range in ACL processing. The root cause is incorrect encoding in the compression module, which could allow an unauthenticated, remote attacker to bypass...