CVE-2019-1910

Cisco IOS XR Software prior to Release 6.6.3 is vulnerable to an IS-IS Denial of Service through crafted IS-IS link-state PDUs. The issue stems from incorrect processing of these PDUs, allowing an unauthenticated attacker in the same IS-IS area to trigger a restart of the IS-IS process and a DoS ...

CVE-2019-1918

Cisco IOS XR Software is affected by CVE-2019-1918 in the IS-IS implementation. An unauthenticated attacker in the same IS-IS area can send crafted IS-IS link-state PDUs to trigger DoS by causing incorrect calculations and potentially crashing the IS-IS process, per Cisco and NVD entries. The vul...

CVE-2015-0618

Cisco IOS XR DoS (CVE-2015-0618) affects IOS XR 5.0.1/5.2.1 on NCS 6000 and 5.1.3/5.1.4 on CRS-X. The issue arises from improper processing of malformed IPv6 packets with extension headers, allowing remote attackers to trigger a line-card reload and thus a denial of service. Evidence in multiple ...

CVE-2018-0132

Cisco IOS XR Software is affected by CVE-2018-0132 due to a flaw in the FIB code where extremely long routing updates can cause inconsistency between the FIB and RIB. This unauthenticated, remote-triggered condition could lead to a DoS. The root cause is incorrect processing of large routing upda...

CVE-2016-6401

Cisco CVE-2016-6401 affects Cisco Carrier Routing System (CRS) platforms running CRS Carrier Grade Services for CRS-1 and CRS-3, specifically IOS XR-based CRS 5.1 and 5.1.4. The root cause is insufficient logic in processing crafted IPv6-over-MPLS packets in IPv6 over MPLS handling, allowing an u...

CVE-2012-1342

Cisco Carrier Routing System (CRS) versions 3.9, 4.0, and 4.1 are affected by CVE-2012-1342. The issue arises from improper handling of IPv4 fragments (noninitial fragments) which allows remote, unauthenticated attackers to bypass ACL entries and reach restricted network segments. The vulnerabili...

CVE-2013-1112

The CVE-2013-1112 issue pertains to Cisco Carrier Routing System (CRS). It is caused by improper handling of short malformed packets, leading to inefficient processing and a denial of service (packet loss). The vulnerability can be exploited by an unauthenticated, remote attacker to degrade norma...

CVE-2011-3283

Cisco Carrier Routing System 3.9.1 is affected by a vulnerability that allows remote attackers to cause a denial of service (Metro subsystem crash) through a fragmented GRE packet (Bug ID CSCts14887). The available sources specify the affected product and version and the attack vector as network-...